{"vulnerability": "2025-35", "sightings": [{"uuid": "d47a2374-e107-4320-b8cf-db8adb988c52", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35036", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqqbu37ft52e", "content": "", "creation_timestamp": "2025-06-03T21:56:32.968433Z"}, {"uuid": "1b3be631-36c1-468d-845e-b76a1547246c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lstbhihml22m", "content": "", "creation_timestamp": "2025-06-30T13:17:54.902710Z"}, {"uuid": "e7770fd2-edf3-4430-aedd-cec5a7e89916", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3516", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpboafui2y2h", "content": "", "creation_timestamp": "2025-05-16T09:03:06.613406Z"}, {"uuid": "16111712-290e-492b-ba7c-c386f574323a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3524", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ltb6djgj7q2i", "content": "", "creation_timestamp": "2025-07-06T01:59:15.160520Z"}, {"uuid": "872d61fc-d6af-4dd2-b27b-af6eb14b9640", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3580", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lpw7qgrc6727", "content": "", "creation_timestamp": "2025-05-24T13:09:30.420872Z"}, {"uuid": "b62ca8e2-ca22-4bf4-8860-7b20b66f2993", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3580", "type": "seen", "source": "https://bsky.app/profile/grafana.bsky.social/post/3lrqxey2v6k2g", "content": "", "creation_timestamp": "2025-06-16T21:47:02.062893Z"}, {"uuid": "0bdfb524-887e-47df-aacd-4d40ab4cfb22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114328130451752899", "content": "", "creation_timestamp": "2025-04-13T01:47:06.823063Z"}, {"uuid": "167a7d39-7242-4d27-9f0b-c50fc3c25520", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3580", "type": "seen", "source": "https://bsky.app/profile/nixpkgssecuritychanges.gerbet.me/post/3lpweidkfmm2s", "content": "", "creation_timestamp": "2025-05-24T14:34:27.753478Z"}, {"uuid": "df0916c1-eb12-4366-9976-d895cc9a4617", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3532", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmot25wrse2b", "content": "", "creation_timestamp": "2025-04-13T10:18:05.590856Z"}, {"uuid": "d9a91ddb-012f-46e1-b170-4ac262a4656d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3531", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmot272saz2l", "content": "", "creation_timestamp": "2025-04-13T10:18:06.487293Z"}, {"uuid": "78eec4c0-75ed-4741-8f93-cd33ba7f3636", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3546", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114330678245914397", "content": "", "creation_timestamp": "2025-04-13T12:35:03.109471Z"}, {"uuid": "3119da5c-b648-40dc-bb7b-6f597d1002d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3535", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114330708197191527", "content": "", "creation_timestamp": "2025-04-13T12:42:40.697176Z"}, {"uuid": "8a860d7c-8a71-46ce-a855-0720520d9969", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3535", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmpazl7opm2r", "content": "", "creation_timestamp": "2025-04-13T14:28:17.442402Z"}, {"uuid": "57732efe-7d09-46c2-b84c-07f8cacf047d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3533", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmpazlj7ak2b", "content": "", "creation_timestamp": "2025-04-13T14:28:18.098778Z"}, {"uuid": "933c4ef4-8f00-4b06-80bb-557a5d464c50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3536", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmpazlmrnu2r", "content": "", "creation_timestamp": "2025-04-13T14:28:18.693714Z"}, {"uuid": "46c3f3a1-4435-4c67-8bf2-a634593d55ae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3537", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmpazlpste2v", "content": "", "creation_timestamp": "2025-04-13T14:28:19.340055Z"}, {"uuid": "994fa776-09fc-419f-a621-cd09d11387e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3534", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmpazlwnyy2q", "content": "", "creation_timestamp": "2025-04-13T14:28:20.590366Z"}, {"uuid": "54fb3ce7-c7fd-4b4b-9961-af4527272717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114332618487433137", "content": "", "creation_timestamp": "2025-04-13T20:48:29.204800Z"}, {"uuid": "83398f43-f5ea-4e33-8cbc-4b233eadf214", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lmpwjtf47gy2", "content": "", "creation_timestamp": "2025-04-13T20:54:38.555175Z"}, {"uuid": "ce52ff2e-976b-4c93-95b5-749473bed160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3536", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lmpwjtruaan2", "content": "", "creation_timestamp": "2025-04-13T20:54:39.294857Z"}, {"uuid": "e0650be1-faad-4fd5-9d64-3ae1a1a120f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3535", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lmpwk4lboky2", "content": "", "creation_timestamp": "2025-04-13T20:54:40.381813Z"}, {"uuid": "f78fb40a-bd4d-4604-948d-70a0a56bd438", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3534", "type": "seen", "source": "https://bsky.app/profile/FunctionalProgramming.activitypub.awakari.com.ap.brid.gy/post/3lmpwk6bmci32", "content": "", "creation_timestamp": "2025-04-13T20:54:41.219080Z"}, {"uuid": "a633b8ca-ba9e-47a6-9a41-c021d1e08518", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmq3cr7zpx2c", "content": "", "creation_timestamp": "2025-04-13T22:18:43.185205Z"}, {"uuid": "72689adb-3902-471e-8a78-241821174cc2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3539", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114333561900525792", "content": "", "creation_timestamp": "2025-04-14T00:48:24.460545Z"}, {"uuid": "ae6541a0-804e-4e2e-8a61-9f0f051cf55a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3540", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114333561958185836", "content": "", "creation_timestamp": "2025-04-14T00:48:25.329753Z"}, {"uuid": "6d864474-8bb6-48f7-a4f3-338771c9d9f8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3541", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114333561991468804", "content": "", "creation_timestamp": "2025-04-14T00:48:25.901301Z"}, {"uuid": "821f47c7-3b9c-4411-895f-c51320bee7ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3540", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqiohaznd2g", "content": "", "creation_timestamp": "2025-04-14T02:17:54.057726Z"}, {"uuid": "2423861a-04fb-4c1c-a213-460137dde7fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3539", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqiohoda524", "content": "", "creation_timestamp": "2025-04-14T02:17:55.307235Z"}, {"uuid": "30fe13e8-10bb-4667-ab9e-a11828c7b57b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3541", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqiohrcww2l", "content": "", "creation_timestamp": "2025-04-14T02:17:55.864456Z"}, {"uuid": "ed14db49-59d3-43ca-99d7-f6a6d02a8b24", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3543", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqiohuvcx2h", "content": "", "creation_timestamp": "2025-04-14T02:17:56.481670Z"}, {"uuid": "773e72a3-8693-490e-b0c1-dfb53a85c08d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3544", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqiohyy6h2h", "content": "", "creation_timestamp": "2025-04-14T02:17:57.058800Z"}, {"uuid": "e2d27665-2d13-4ad1-8334-d413731b07d1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3542", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqioi4o4m2b", "content": "", "creation_timestamp": "2025-04-14T02:17:57.637637Z"}, {"uuid": "097c8562-c98e-4dd5-8f83-9a1b9429c744", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3542", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114334034390701326", "content": "", "creation_timestamp": "2025-04-14T02:48:34.216207Z"}, {"uuid": "22f4e81c-1315-4c74-80be-b042f87fff33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3543", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114334034418693032", "content": "", "creation_timestamp": "2025-04-14T02:48:34.648547Z"}, {"uuid": "04632544-c2e8-4039-8dee-77fa01f1deed", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3544", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114334034460931257", "content": "", "creation_timestamp": "2025-04-14T02:48:35.181481Z"}, {"uuid": "734715e4-d73f-4c76-8964-36a8f66638c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3545", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqqa26xxo2b", "content": "", "creation_timestamp": "2025-04-14T04:33:00.341545Z"}, {"uuid": "8e48f147-a942-405a-acf6-1f6aaccc231f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3546", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqqa2iolk2q", "content": "", "creation_timestamp": "2025-04-14T04:33:01.036245Z"}, {"uuid": "df13730b-16e7-4f37-bcfa-478473ae930f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3548", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqqa2mowg2z", "content": "", "creation_timestamp": "2025-04-14T04:33:01.556342Z"}, {"uuid": "1fb5af17-f9d9-4b46-a4e7-b33752fc54ad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3549", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqqa2pw7x2g", "content": "", "creation_timestamp": "2025-04-14T04:33:02.097467Z"}, {"uuid": "2624bee4-8a3a-40be-8c0e-e4be8da217c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3547", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqqa2tj652q", "content": "", "creation_timestamp": "2025-04-14T04:33:02.661767Z"}, {"uuid": "e18cbab1-ce32-4e08-88c3-9cd3f0f01726", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3572", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmqqa2wrnv2q", "content": "", "creation_timestamp": "2025-04-14T04:33:03.235649Z"}, {"uuid": "2c692a50-317d-4f6f-92cf-40a76a729c09", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3545", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114334505127318176", "content": "", "creation_timestamp": "2025-04-14T04:48:16.929715Z"}, {"uuid": "26951e0b-f237-420c-bada-70635047b341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3546", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114334505157285718", "content": "", "creation_timestamp": "2025-04-14T04:48:17.495396Z"}, {"uuid": "d935ccdc-a182-45dd-98f7-7991e890989c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3554", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lmqxvko7qj2t", "content": "", "creation_timestamp": "2025-04-14T06:50:18.466172Z"}, {"uuid": "a47170b2-0fa9-4e15-bd94-760e64040784", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3550", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmr5wiwplb2u", "content": "", "creation_timestamp": "2025-04-14T08:38:12.738654Z"}, {"uuid": "058518f1-1bf7-4e63-8ffb-2770346fc565", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3551", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmr5wjaphk2z", "content": "", "creation_timestamp": "2025-04-14T08:38:13.406632Z"}, {"uuid": "226c73d8-5876-4b54-a0a8-5a4a621b20bc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3552", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmreecldry2j", "content": "", "creation_timestamp": "2025-04-14T10:33:18.749793Z"}, {"uuid": "a8ef0c5a-f473-4448-87ed-ac71fe1cf9cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3555", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmreect2eg2g", "content": "", "creation_timestamp": "2025-04-14T10:33:19.852883Z"}, {"uuid": "995cc6ec-d44d-4a9c-ac91-a843c0648a2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3554", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmreecwixj2v", "content": "", "creation_timestamp": "2025-04-14T10:33:20.437940Z"}, {"uuid": "f0fd49f9-5e71-4caf-b658-c1a23b695c41", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3553", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmreedb6z22u", "content": "", "creation_timestamp": "2025-04-14T10:33:22.320576Z"}, {"uuid": "6a0ea385-efbc-4047-a3fd-6a04575a2a14", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114336307577276208", "content": "", "creation_timestamp": "2025-04-14T12:26:40.087517Z"}, {"uuid": "8ac863a9-d3d2-40ec-bd9f-02d94297e992", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3558", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl32wo5o2h", "content": "", "creation_timestamp": "2025-04-14T12:33:24.473378Z"}, {"uuid": "806effcd-36ba-466a-9bab-51b94d634a0f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3563", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl33vv2j24", "content": "", "creation_timestamp": "2025-04-14T12:33:28.180361Z"}, {"uuid": "8c0955ba-6875-450a-b867-21bbbb18027c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3559", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl33zh632u", "content": "", "creation_timestamp": "2025-04-14T12:33:28.742545Z"}, {"uuid": "52b94f5d-70db-4a90-b4a8-927d8d87edfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3562", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmrl34ha3w2z", "content": "", "creation_timestamp": "2025-04-14T12:33:30.647621Z"}, {"uuid": "c8343790-33a5-480a-b464-f09cfb22f872", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3566", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114336727858048170", "content": "", "creation_timestamp": "2025-04-14T14:13:32.824852Z"}, {"uuid": "8edf979e-691e-49c4-b2de-631f1e7976b2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3570", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmryimfqik2c", "content": "", "creation_timestamp": "2025-04-14T16:33:38.903327Z"}, {"uuid": "17a8d621-a27d-4d23-a185-eaea7535f55e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmryina3wa2a", "content": "", "creation_timestamp": "2025-04-14T16:33:42.740559Z"}, {"uuid": "dd73df23-e962-4408-a95e-a414564cfa6c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3585", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmsfw57il724", "content": "", "creation_timestamp": "2025-04-14T20:33:50.575789Z"}, {"uuid": "017271cc-726f-49e2-bce4-77f8b4d93c0d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3587", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvuczaj2q", "content": "", "creation_timestamp": "2025-04-14T22:38:58.151101Z"}, {"uuid": "d82c01e8-cc61-4d58-94d8-6f705af20542", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3592", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvuupqp24", "content": "", "creation_timestamp": "2025-04-14T22:39:01.232835Z"}, {"uuid": "db5edb80-3eea-4fa0-87fc-8fd562b76fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3591", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvv3emz2l", "content": "", "creation_timestamp": "2025-04-14T22:39:02.529189Z"}, {"uuid": "93f8b6f3-f803-49c1-8b2e-733a9d1589a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3590", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvv72gv2u", "content": "", "creation_timestamp": "2025-04-14T22:39:03.103469Z"}, {"uuid": "2843a3ac-0793-4e2c-a25d-6904ccf35cd8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3588", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvvcn5q2h", "content": "", "creation_timestamp": "2025-04-14T22:39:03.732953Z"}, {"uuid": "575dc5fd-3633-4a4c-8756-4c891ab5e7bf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3589", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmsmvvg32n2j", "content": "", "creation_timestamp": "2025-04-14T22:39:04.341020Z"}, {"uuid": "e88c25ee-fe34-4f59-9a16-15edc604dee3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3593", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lmsnh2zzce2c", "content": "", "creation_timestamp": "2025-04-14T22:48:34.454608Z"}, {"uuid": "60709043-d74b-4823-a806-f7f829b08295", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3592", "type": "seen", "source": "https://bsky.app/profile/potato.software/post/3lmspdvwwp72p", "content": "", "creation_timestamp": "2025-04-14T23:22:35.983144Z"}, {"uuid": "b97d0138-ae1a-4843-bac8-0b1b072d9efb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3593", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmt2bk6tu42l", "content": "", "creation_timestamp": "2025-04-15T02:38:07.623873Z"}, {"uuid": "b4e3ade0-1d2b-4f79-bcf6-2bc93caad44c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3573", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmtofskcim2z", "content": "", "creation_timestamp": "2025-04-15T08:38:27.092569Z"}, {"uuid": "067e6f5b-56d0-41b7-a642-4a06457759e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3576", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lmtofsrfxt2h", "content": "", "creation_timestamp": "2025-04-15T08:38:28.269800Z"}, {"uuid": "61c3061f-d81b-4beb-ab99-d76145efa601", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "seen", "source": "https://feedsin.space/feed/CISAKevBot/items/4135365", "content": "", "creation_timestamp": "2025-06-02T17:59:17.845906Z"}, {"uuid": "6ae276a0-f200-402c-851a-566056af0ab5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3579", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114341991949529927", "content": "", "creation_timestamp": "2025-04-15T12:32:16.849063Z"}, {"uuid": "bed20e70-d68d-448f-8c4d-8d8016e1eabc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3578", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114341991949529927", "content": "", "creation_timestamp": "2025-04-15T12:32:16.939973Z"}, {"uuid": "e14b4167-5291-42bb-88bc-9ffc1700c3e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35005", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr4xwhmoqd2u", "content": "", "creation_timestamp": "2025-06-08T23:03:32.268964Z"}, {"uuid": "5c479892-d83f-4e15-b5f0-4b85d6e5ae33", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35004", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr4y22fop42m", "content": "", "creation_timestamp": "2025-06-08T23:05:32.637878Z"}, {"uuid": "c72cb0a8-e95c-4cfb-97f7-eff3e8b0f4a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35006", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr4y5ve66w2u", "content": "", "creation_timestamp": "2025-06-08T23:07:41.470856Z"}, {"uuid": "d1ef27b4-8d2d-49c1-9fee-7565a01bc555", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35008", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr4ybzqm6s2m", "content": "", "creation_timestamp": "2025-06-08T23:10:00.554284Z"}, {"uuid": "27b2c645-f4a4-4ac0-962a-5373774d2893", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35010", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr4ylfrcbq2u", "content": "", "creation_timestamp": "2025-06-08T23:15:14.911477Z"}, {"uuid": "8e068b4c-7be9-4639-b562-b577b2189d59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-3568", "type": "seen", "source": "https://bsky.app/profile/securitycipher.bsky.social/post/3ln2f5pjf7l27", "content": "", "creation_timestamp": "2025-04-18T00:41:28.671264Z"}, {"uuid": "7db19911-9b68-42b1-ad03-739e3488f3a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3520", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114356682976579069", "content": "", "creation_timestamp": "2025-04-18T02:48:24.093039Z"}, {"uuid": "8268e5a0-38f8-4455-828d-6150d1a5fdd4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln2mk6kpep2h", "content": "", "creation_timestamp": "2025-04-18T02:53:43.882474Z"}, {"uuid": "98ebacb0-9c48-46b3-a756-a5b0b9ad8297", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3520", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3ln2yby6tcq2q", "content": "", "creation_timestamp": "2025-04-18T06:23:53.060883Z"}, {"uuid": "57611458-1130-4a67-8b0e-fdecfac9d759", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35007", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr4zx2d6ht2u", "content": "", "creation_timestamp": "2025-06-08T23:39:39.324313Z"}, {"uuid": "43f9a6d4-2f4c-4fd0-91c4-5a2d70f8eaf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35009", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lr52ixa2ia2o", "content": "", "creation_timestamp": "2025-06-08T23:49:40.099541Z"}, {"uuid": "7e3c94db-d41c-4e45-af65-0d5ed4f0df3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35004", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114650842275216216", "content": "", "creation_timestamp": "2025-06-09T01:36:59.618257Z"}, {"uuid": "1983e41f-6869-447c-ac28-dad7a01741e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35006", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114650842275216216", "content": "", "creation_timestamp": "2025-06-09T01:36:59.795333Z"}, {"uuid": "bf634a96-d9f3-4a9d-b034-a998eda08f3e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35008", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114650842275216216", "content": "", "creation_timestamp": "2025-06-09T01:36:59.983795Z"}, {"uuid": "23262113-abfc-456d-9c8c-1a9d99a2bff5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35010", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114650842275216216", "content": "", "creation_timestamp": "2025-06-09T01:37:00.169218Z"}, {"uuid": "977588ec-cdf2-4c2b-9200-1ef4c3c1b78e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35005", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114650842275216216", "content": "", "creation_timestamp": "2025-06-09T01:36:59.706152Z"}, {"uuid": "e9dfdbb3-8359-4d19-9eb9-f97b181183ce", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35007", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114650842275216216", "content": "", "creation_timestamp": "2025-06-09T01:36:59.890123Z"}, {"uuid": "d5a75068-148c-42e7-b8dd-20fff00a032e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35009", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114650842275216216", "content": "", "creation_timestamp": "2025-06-09T01:37:00.076432Z"}, {"uuid": "d1f8841e-b77a-423f-9409-b45938c64fad", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3587", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114376847682487238", "content": "", "creation_timestamp": "2025-04-21T16:16:32.996919Z"}, {"uuid": "f1f56708-5254-472c-9bcf-56126ab8cc81", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3577", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnf4gmfj3s2a", "content": "", "creation_timestamp": "2025-04-22T07:04:42.791582Z"}, {"uuid": "2575f290-d851-4cf2-a4af-50a00faceed6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35940", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrc3fgj2cz2e", "content": "", "creation_timestamp": "2025-06-10T23:48:54.346553Z"}, {"uuid": "a7478921-c81f-482c-bac9-d5f56f885285", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "https://poliverso.org/objects/0477a01e-c904c3bb-6eed188d8acb3d31", "content": "", "creation_timestamp": "2025-04-22T10:51:26.496072Z"}, {"uuid": "c216c17c-a481-4699-b44e-3c25153d6048", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3530", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhuhj2qcb2r", "content": "", "creation_timestamp": "2025-04-23T09:20:00.188242Z"}, {"uuid": "4ae2d423-f9b6-4835-afe5-210b1ffedfc1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3529", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnhuhjjesl2h", "content": "", "creation_timestamp": "2025-04-23T09:20:02.545570Z"}, {"uuid": "d7b3c57e-22ef-4b8d-bdc4-28e4135dc8e4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3529", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114386647651425453", "content": "", "creation_timestamp": "2025-04-23T09:48:51.609460Z"}, {"uuid": "46b5790f-c987-4ef0-8a67-080289045c1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35451", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "38bd5187-172a-4eef-86f6-6c6ed4e86aab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35452", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-162-10", "content": "", "creation_timestamp": "2025-06-12T10:00:00.000000Z"}, {"uuid": "e439118f-3213-4f6f-99e6-cb6063ecf11b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lrsdul7yym2u", "content": "", "creation_timestamp": "2025-06-17T11:03:08.372021Z"}, {"uuid": "c28b04fd-e142-4e18-b5bd-750d0f7bb102", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35965", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnkenunit32g", "content": "", "creation_timestamp": "2025-04-24T09:15:14.655450Z"}, {"uuid": "d9a29858-2722-4209-b2e1-7a9470b8787f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3584", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lqowbr3g4e2r", "content": "", "creation_timestamp": "2025-06-03T08:56:47.381194Z"}, {"uuid": "dd507c31-58ac-4c7b-9437-a3ffcdc9a072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnldl5denb2z", "content": "", "creation_timestamp": "2025-04-24T18:28:27.083028Z"}, {"uuid": "51a6cab1-a64c-41c1-a6d9-0f461b24df1c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnlezou2ya2w", "content": "", "creation_timestamp": "2025-04-24T18:54:28.960953Z"}, {"uuid": "a2bb7ba0-e76e-4db2-8bab-f5c72f698838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnlh7ipyke2z", "content": "", "creation_timestamp": "2025-04-24T19:33:31.442904Z"}, {"uuid": "3b785319-5e26-4b0a-a092-ab3803d96e0b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnlxpfzi6524", "content": "", "creation_timestamp": "2025-04-25T00:28:45.285639Z"}, {"uuid": "978c264f-f62e-4651-884d-27229cfae3f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3lnmbnswq3222", "content": "", "creation_timestamp": "2025-04-25T03:26:49.888712Z"}, {"uuid": "24de1cab-f049-447d-990a-288b0809a27e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3500", "type": "seen", "source": "https://infosec.exchange/users/vuldb/statuses/114396856500034471", "content": "", "creation_timestamp": "2025-04-25T05:05:03.141575Z"}, {"uuid": "57d8b732-595d-43d1-ad0d-6cb16cf5b2ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3511", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lnmiyyaostr2", "content": "", "creation_timestamp": "2025-04-25T05:42:35.429243Z"}, {"uuid": "e68a9875-52eb-430b-bdb4-3c8f5735db76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3500", "type": "seen", "source": "http://www.zerodayinitiative.com/advisories/ZDI-25-256/", "content": "", "creation_timestamp": "2025-04-24T03:00:00.000000Z"}, {"uuid": "64539a3b-97e8-4e03-8231-8f48077a4156", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/3lnnmkmk4l42h", "content": "", "creation_timestamp": "2025-04-25T16:14:33.107084Z"}, {"uuid": "ff4c2aa0-6915-4d0c-b276-8ed111cdbb55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3527", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lpemg44q4t2l", "content": "", "creation_timestamp": "2025-05-17T13:08:27.256464Z"}, {"uuid": "3fbea6e7-f505-4be2-a551-2c683832a6c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3501", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114423313718293003", "content": "", "creation_timestamp": "2025-04-29T21:13:29.088208Z"}, {"uuid": "83d12c71-8e8b-4ca9-9b88-d7abc892bed8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3501", "type": "seen", "source": "https://mastodon.social/users/CyberSignaler/statuses/114423451021626092", "content": "", "creation_timestamp": "2025-04-29T21:48:23.691941Z"}, {"uuid": "b1714448-1490-4b2a-9a7b-f41e904edb59", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3501", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lnyhw3ckrj2r", "content": "", "creation_timestamp": "2025-04-29T23:50:49.895889Z"}, {"uuid": "79d5f0d5-a46b-433a-9a22-d1bf28ff25b6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3599", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo2esvzxd424", "content": "", "creation_timestamp": "2025-04-30T18:00:37.813396Z"}, {"uuid": "4ee78a3e-0a82-462a-bd22-f59fcb5009fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3502", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo426ap3qa2n", "content": "", "creation_timestamp": "2025-05-01T09:55:26.329561Z"}, {"uuid": "1d702fff-8c66-406b-be7e-9623aeb120cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3503", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo426aydww2p", "content": "", "creation_timestamp": "2025-05-01T09:55:26.989744Z"}, {"uuid": "b4437c54-7b28-4119-b692-802c80c839f5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3504", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo426b7bib2r", "content": "", "creation_timestamp": "2025-05-01T09:55:28.167497Z"}, {"uuid": "eb2eb3cd-9c99-4e98-99f1-88d9e904d137", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3521", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo426bcw5g24", "content": "", "creation_timestamp": "2025-05-01T09:55:28.777517Z"}, {"uuid": "d80c31fc-80cc-45cb-86c9-4409635689a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35996", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01", "content": "", "creation_timestamp": "2025-05-01T10:00:00.000000Z"}, {"uuid": "23db8e67-f4e2-49fe-8f10-c35d54533882", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35996", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo55xlnnhr2t", "content": "", "creation_timestamp": "2025-05-01T20:35:58.636549Z"}, {"uuid": "166918dd-3c3c-4ba8-a5a7-d478525a264d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35975", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo55xlqy4r2l", "content": "", "creation_timestamp": "2025-05-01T20:35:59.227197Z"}, {"uuid": "bcf33379-fae2-4903-b62c-5fb47cf74341", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3517", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo5cptqdii2l", "content": "", "creation_timestamp": "2025-05-01T22:01:10.550573Z"}, {"uuid": "5f595ac6-87f4-44c4-8f8d-52fe350b27b9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3514", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7paniy2e", "content": "", "creation_timestamp": "2025-05-02T08:00:35.045056Z"}, {"uuid": "4eddd6ca-1d94-4acc-8013-8aac36178342", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3513", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7pmik42h", "content": "", "creation_timestamp": "2025-05-02T08:00:36.751826Z"}, {"uuid": "4ee3b855-dcd9-4cd4-bc55-2708d27988e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3510", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lo6e7qccvf2h", "content": "", "creation_timestamp": "2025-05-02T08:00:40.189074Z"}, {"uuid": "b832408d-9f79-412d-8313-c5f8d41a6c00", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3517", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lo6vp375afk2", "content": "", "creation_timestamp": "2025-05-02T14:43:55.554979Z"}, {"uuid": "90d9d98f-663f-475b-bad9-609373277dae", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3583", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3log5hwzg732p", "content": "", "creation_timestamp": "2025-05-05T10:21:10.784423Z"}, {"uuid": "181ed789-c580-4964-8f6f-73f39f754030", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/93", "content": "", "creation_timestamp": "2025-04-25T13:49:18.000000Z"}, {"uuid": "3b1a2c62-63bd-4d8a-9729-59742916e0a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "d9b1b002-5f38-43d1-98f9-b34b24a5e696", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "cdba81e6-b632-483b-9f52-ea7744d11cdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "1e5ad45b-2d3b-47c3-a721-1586c4f2dd6f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "4b5515ba-054e-4b2d-b822-5d186302eced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "02a24003-9ed6-4173-ba65-011a84b9e507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "9b730bdb-f4dd-4050-ae58-4ef8f8eac603", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "3f1d1b8d-874c-4eed-be90-5ef410edd643", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "033c5446-8a94-45ce-8a51-56835ebbcce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "de34f11c-6400-4420-9f2f-83e746228964", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "d5ad9f5b-b05b-4f49-8743-a05b8fd6e287", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "fdce9d14-5efd-46f4-affb-51559fccfea0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://seclists.org/oss-sec/2025/q2/92", "content": "", "creation_timestamp": "2025-04-24T22:10:30.000000Z"}, {"uuid": "0f1b6250-3b82-4e1b-a36f-e61767235e61", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcu27baz2", "content": "", "creation_timestamp": "2025-05-07T23:30:24.343531Z"}, {"uuid": "74c07f83-0a31-40ba-ab11-979bee5a214c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35995", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3lomkcyqinak2", "content": "", "creation_timestamp": "2025-05-07T23:30:26.685370Z"}, {"uuid": "0a3ce8a7-1b15-4c76-9cbf-6b8c0791b37e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35995", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomnomqszo2o", "content": "", "creation_timestamp": "2025-05-08T00:27:12.792440Z"}, {"uuid": "9af3f999-9177-48c7-95a8-c16cc4f8a792", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lomnooe7my2l", "content": "", "creation_timestamp": "2025-05-08T00:27:20.485740Z"}, {"uuid": "911d7b62-ae26-4d18-9290-8e7b634495cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3506", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loo2jxzttl32", "content": "", "creation_timestamp": "2025-05-08T14:05:31.317178Z"}, {"uuid": "4cfc12a3-46bd-416f-88a6-325a66f60d62", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3506", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loodctgawf2j", "content": "", "creation_timestamp": "2025-05-08T16:27:00.715684Z"}, {"uuid": "a57a17b1-d240-41b2-b9fb-b3037afe419f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3511", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-25-128-03", "content": "", "creation_timestamp": "2025-05-08T10:00:00.000000Z"}, {"uuid": "4986eaef-6fa1-48b8-b722-84365475e207", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35941", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114665083996459512", "content": "", "creation_timestamp": "2025-06-11T13:58:51.163232Z"}, {"uuid": "ad92109c-b80f-4d1f-bfb4-02647fadccf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3528", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loqh7e4kk52l", "content": "", "creation_timestamp": "2025-05-09T12:41:56.826834Z"}, {"uuid": "fbe3717c-9b39-476c-bc0a-0752a3e41ee0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3528", "type": "seen", "source": "https://bsky.app/profile/2rZiKKbOU3nTafniR2qMMSE0gwZ.activitypub.awakari.com.ap.brid.gy/post/3loqhnn5mclq2", "content": "", "creation_timestamp": "2025-05-09T12:53:16.037427Z"}, {"uuid": "2d62b422-0d99-48c6-aa87-6e79400068f3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3528", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114478054319956518", "content": "", "creation_timestamp": "2025-05-09T13:14:43.669240Z"}, {"uuid": "4026a1c4-7cb8-4b65-a4c1-6c08be178a76", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35983", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/114828809599813642", "content": "", "creation_timestamp": "2025-07-10T11:56:24.750027Z"}, {"uuid": "c916770c-7cc8-4d88-b215-6e653c5a898b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3597", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3loxl7lrmon2h", "content": "", "creation_timestamp": "2025-05-12T08:42:18.962750Z"}, {"uuid": "a5c5e860-2788-442e-aa4c-891a2684053d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35471", "type": "seen", "source": "https://infosec.exchange/users/wdormann/statuses/114497901424760486", "content": "", "creation_timestamp": "2025-05-13T01:22:08.030870Z"}, {"uuid": "a5fcfbc5-94ae-43fd-b9c3-1b6e2cddb49d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35471", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lozjabgzaf24", "content": "", "creation_timestamp": "2025-05-13T03:12:15.440344Z"}, {"uuid": "a1b6bc51-2ee2-4770-92de-563fbd9c41bd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3580", "type": "seen", "source": "https://bsky.app/profile/josanneves.bsky.social/post/3lqf6ovbkv22d", "content": "", "creation_timestamp": "2025-05-30T12:00:42.324255Z"}, {"uuid": "828712a8-da6b-4d6f-9347-9369d24317cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35996", "type": "seen", "source": "https://infosec.exchange/users/certvde/statuses/114771847976520425", "content": "", "creation_timestamp": "2025-06-30T10:30:19.203160Z"}, {"uuid": "4e562477-540f-45f0-93e6-6904e337476b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35996", "type": "seen", "source": "https://bsky.app/profile/certvde.infosec.exchange.ap.brid.gy/post/3lssy4b6g2mb2", "content": "", "creation_timestamp": "2025-06-30T10:30:58.132784Z"}, {"uuid": "344c660c-c5be-4f4f-9a37-d34f8c77a968", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lqq6sx4aqa22", "content": "", "creation_timestamp": "2025-06-03T21:02:18.584665Z"}, {"uuid": "c18beba3-0bc4-4560-889d-d80d06d8ca31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35452", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ly5iriwsde2s", "content": "", "creation_timestamp": "2025-09-06T06:01:22.062264Z"}, {"uuid": "7faaa89d-3188-4436-b6b2-f84aa10fc7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35451", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3ly5nsshmpx2r", "content": "", "creation_timestamp": "2025-09-06T07:31:33.756538Z"}, {"uuid": "d6cb2d09-d3f5-4dc6-a108-8ee9eefd9cf1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35966", "type": "seen", "source": "https://infosec.place/objects/a987ac73-5467-4fe8-86cb-40d96e9bc9c4", "content": "", "creation_timestamp": "2025-07-22T15:30:28.613136Z"}, {"uuid": "56faa87b-2bfa-4286-bdc4-241ee6dd2838", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35966", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lukymz3tpy2h", "content": "", "creation_timestamp": "2025-07-22T17:09:00.037725Z"}, {"uuid": "c87cbf7a-624e-4439-807f-832102c8dcd6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3576", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3lzbdfiksve2q", "content": "", "creation_timestamp": "2025-09-20T12:00:59.930963Z"}, {"uuid": "7e0f8fae-408d-4962-bd13-a7387092b32a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35966", "type": "seen", "source": "https://bsky.app/profile/buherator.bsky.social/post/3lumq4uylav2x", "content": "", "creation_timestamp": "2025-07-23T09:42:08.974959Z"}, {"uuid": "2961955b-5174-4b03-a99b-3416f2147dff", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbxvqpe2g", "content": "", "creation_timestamp": "2025-08-03T21:03:02.620011Z"}, {"uuid": "568c9853-d668-497b-81a0-49795e6618de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lvjlbxy5zd2w", "content": "", "creation_timestamp": "2025-08-03T21:03:03.204983Z"}, {"uuid": "88a61899-82ed-4b04-8402-4573dbef0e46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3576", "type": "seen", "source": "https://bsky.app/profile/ferramentaslinux.bsky.social/post/3lyzxgpozcc25", "content": "", "creation_timestamp": "2025-09-17T13:38:20.881436Z"}, {"uuid": "f9ff2a27-fbb8-4197-947c-da18bbcff44f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35970", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lvs7tq72ew2h", "content": "", "creation_timestamp": "2025-08-07T07:31:52.149913Z"}, {"uuid": "fe270b19-030c-4d3a-995a-29664d280d75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35970", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lvsgzechbp2p", "content": "", "creation_timestamp": "2025-08-07T09:40:16.576341Z"}, {"uuid": "8c2d0184-3d17-4e48-9633-25bc18d1e4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-28T08:23:31.000000Z"}, {"uuid": "7513447b-1ded-4f3f-ab6d-588840f8a6a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "seen", "source": "MISP/3c19819c-1dac-4ef2-bfed-be5efa7e0123", "content": "", "creation_timestamp": "2025-09-29T03:12:18.000000Z"}, {"uuid": "0bdf5b08-75f1-4dd4-9bc4-8e4692c6afa7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:56.000000Z"}, {"uuid": "787ca441-5858-42f0-a475-4dbb8d7d345e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3579", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:57.000000Z"}, {"uuid": "dfa52225-1c35-4fe8-abac-fb84031fe5e9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3578", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-09T13:26:57.000000Z"}, {"uuid": "74538949-a22d-4135-8392-bb271abbc7b3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35021", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115491604192939686", "content": "", "creation_timestamp": "2025-11-04T13:13:47.619343Z"}, {"uuid": "8fb2fc70-a6c3-48d4-b59d-1e753072c145", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:40.000000Z"}, {"uuid": "179e7499-e312-486f-b9b0-49eab030bdb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35028", "type": "seen", "source": "https://bsky.app/profile/leekthehack.bsky.social/post/3m6wrwmkvo22m", "content": "", "creation_timestamp": "2025-12-01T15:53:16.762456Z"}, {"uuid": "0e5c72e0-33be-4405-9edb-c9e970dd7cf0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3579", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:42.000000Z"}, {"uuid": "0fee9272-fa47-44e0-9aad-cceb8e28e41d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3578", "type": "seen", "source": "MISP/abd2a650-703d-4a2f-9f73-3051c1672e27", "content": "", "creation_timestamp": "2025-08-11T18:47:42.000000Z"}, {"uuid": "cf62c59b-9dae-441c-9e3c-c24bcc910a46", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3500", "type": "seen", "source": "https://infosec.exchange/users/cR0w/statuses/115645287500499808", "content": "", "creation_timestamp": "2025-12-01T16:37:28.643832Z"}, {"uuid": "d35ae238-424f-48ac-95af-98fa2d64dced", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35981", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m3trjteotf2m", "content": "", "creation_timestamp": "2025-10-23T06:52:16.121131Z"}, {"uuid": "422fb1b9-9e43-423a-abe7-36b8deaed0c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35042", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3lzhwowvzy72q", "content": "", "creation_timestamp": "2025-09-23T03:02:17.198587Z"}, {"uuid": "b44f8c5f-b273-4a7a-a81a-22985b8aaba3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35006", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "2183f9ef-b9f3-4771-843b-56d9b8eec8a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35007", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "dffce564-4a70-4d0f-84aa-1fa7cb090a5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35008", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "0c927bf6-0ed1-454e-83ea-d3266f47f0a8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35009", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "24925524-c739-443e-86be-02e8441274cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35010", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "c11a8063-f571-451e-abf2-1b573c6715fb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35027", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "edb20132-143e-44b8-8710-7b780936b56b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35010", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35010/", "content": "", "creation_timestamp": "2025-06-08T18:58:51.000000Z"}, {"uuid": "491906c4-58e5-4dbf-bf9c-ba0d6ec74e8a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35027", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35027/", "content": "", "creation_timestamp": "2025-09-26T04:41:10.000000Z"}, {"uuid": "a909f57f-a856-4301-8e6e-c1ee66fd9b1a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35004", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35004/", "content": "", "creation_timestamp": "2025-06-08T18:58:51.000000Z"}, {"uuid": "abf83309-3969-4aa5-80be-17896e6550c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35006", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35006/", "content": "", "creation_timestamp": "2025-06-08T18:58:51.000000Z"}, {"uuid": "90449da8-5943-4f5c-b418-af6b6c772437", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35009", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35009/", "content": "", "creation_timestamp": "2025-06-08T18:58:51.000000Z"}, {"uuid": "1946e166-a201-426e-9915-e1164d959fb6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35004", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "6b2ec695-e9e1-47ac-b6e1-dd5a7eed4fe7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35005", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35005/", "content": "", "creation_timestamp": "2025-06-08T18:58:51.000000Z"}, {"uuid": "9f8ff49e-f956-4a1c-9667-5547fa1a68ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35008", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35008/", "content": "", "creation_timestamp": "2025-06-08T18:58:51.000000Z"}, {"uuid": "99c4aa51-713e-4340-988a-2ff2e1b98743", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35007", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35007/", "content": "", "creation_timestamp": "2025-06-08T18:58:51.000000Z"}, {"uuid": "3ad32b0a-5a21-4f06-9b41-46aae4d869de", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35005", "type": "seen", "source": "http://takeonme.org/cve/", "content": "", "creation_timestamp": "2000-12-31T23:00:00.000000Z"}, {"uuid": "52f0b15d-0550-4617-9f5c-44c8bc720ac9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35980", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4efinz6ha2k", "content": "", "creation_timestamp": "2025-10-29T21:32:07.789328Z"}, {"uuid": "90b77995-8403-4c78-91e4-a42313a6d68f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35984", "type": "seen", "source": "https://infosec.place/objects/0c4a6b51-c339-4648-8cd9-5a4b3328e05d", "content": "", "creation_timestamp": "2025-08-25T17:00:17.630044Z"}, {"uuid": "1358a985-9dcd-41d1-99a6-e52d29cb7072", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35971", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5eqcvm25o2s", "content": "", "creation_timestamp": "2025-11-11T18:10:57.227524Z"}, {"uuid": "7ef46046-fb32-4093-a55d-19ba20005c13", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35984", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxbabbfdek2z", "content": "", "creation_timestamp": "2025-08-26T00:14:33.700773Z"}, {"uuid": "fa6e19fb-38c5-4759-a484-a29ffee5c71f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35963", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m5equshvcf2s", "content": "", "creation_timestamp": "2025-11-11T18:20:57.863194Z"}, {"uuid": "2311eb4c-236b-485b-b7b8-c6fa71bb79ba", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-3500", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115647393813391356", "content": "", "creation_timestamp": "2025-12-02T01:33:09.652661Z"}, {"uuid": "696c5e22-0167-4c16-9722-06a4679b3ee8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lxkxfa2ess2o", "content": "", "creation_timestamp": "2025-08-29T21:02:27.446532Z"}, {"uuid": "e5c068c9-6923-49b7-9a95-e0ebba458ab1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-3500", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m6xse2jwox26", "content": "", "creation_timestamp": "2025-12-02T01:33:10.384396Z"}, {"uuid": "474b19fc-ee56-4b60-9ef7-b106da385007", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35021", "type": "seen", "source": "https://bsky.app/profile/offseq.bsky.social/post/3m4rfa5ugvw2d", "content": "", "creation_timestamp": "2025-11-04T01:31:59.467122Z"}, {"uuid": "4083a079-bee6-4bfc-b63d-d25b6797413b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35021", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3m4rg3juvam2x", "content": "", "creation_timestamp": "2025-11-04T01:47:17.661930Z"}, {"uuid": "e3574f71-8659-4401-8762-6955e2066cab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35021", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35021/", "content": "", "creation_timestamp": "2025-11-03T23:06:00.000000Z"}, {"uuid": "c47aebc2-4e29-4e25-bbc3-4eca0bfd398e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35028", "type": "seen", "source": "http://takeonme.org/cves/cve-2025-35028/", "content": "", "creation_timestamp": "2025-11-30T18:37:00.000000Z"}, {"uuid": "0bbe4a54-79bb-492c-8ebc-8cd4de37f2e6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3586", "type": "seen", "source": "https://gist.github.com/Darkcrai86/97e979aa0a18c6083e6c140ffe3c735d", "content": "", "creation_timestamp": "2025-09-01T21:30:39.000000Z"}, {"uuid": "de421971-49ab-4ec0-86eb-304cb77ac302", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3586", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3lxsoqhcmyz2v", "content": "", "creation_timestamp": "2025-09-01T22:48:51.130816Z"}, {"uuid": "5d69fe88-d47a-41ee-8cbb-cd1acce25ffc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "cve-2025-35028", "type": "seen", "source": "https://infosec.exchange/users/offseq/statuses/115641378475814622", "content": "", "creation_timestamp": "2025-12-01T00:03:22.479194Z"}, {"uuid": "cf62939e-18c8-48ff-8c3a-ce756ec31abd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35021", "type": "seen", "source": "https://bsky.app/profile/jos1264.social.skynetcloud.site.ap.brid.gy/post/3m4rkpssehgm2", "content": "", "creation_timestamp": "2025-11-04T03:10:41.661310Z"}, {"uuid": "21df2ac9-0c27-41a8-b3b4-848a7c7afe37", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "confirmed", "source": "https://github.com/projectdiscovery/nuclei-templates/tree/main/http/cves/2025/CVE-2025-3515.yaml", "content": "", "creation_timestamp": "2025-09-03T07:53:54.000000Z"}, {"uuid": "3c8c507f-9737-4025-b5b0-84912bdb3420", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3576", "type": "seen", "source": "https://bsky.app/profile/lambdawatchdog.bsky.social/post/3ly3mfjszi325", "content": "", "creation_timestamp": "2025-09-05T12:00:54.681207Z"}, {"uuid": "2b372ac3-26a8-4e15-a172-e4e7dc893270", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3ly4knrgdgf24", "content": "", "creation_timestamp": "2025-09-05T21:02:25.382956Z"}, {"uuid": "aac2b464-fdf7-47f7-941a-7700243b5e4b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3500", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m74db3ris22y", "content": "", "creation_timestamp": "2025-12-03T20:46:23.598796Z"}, {"uuid": "b54cd9d8-7430-4846-af53-425aa9c849ea", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3500", "type": "seen", "source": "https://bsky.app/profile/getpokemon7.bsky.social/post/3m7bqonk3ws2p", "content": "", "creation_timestamp": "2025-12-06T00:29:56.442433Z"}, {"uuid": "98c5f39b-4cf0-4a4d-9684-cb6e08410c35", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3525", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/3mfpnqxaq7i2o", "content": "", "creation_timestamp": "2026-02-25T21:45:57.780798Z"}, {"uuid": "dfd4a923-4e00-4b8c-b948-68cc11b85a22", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3525", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mfoqwufv6l2q", "content": "", "creation_timestamp": "2026-02-25T13:10:17.627869Z"}, {"uuid": "3b5a29aa-d17b-49b0-801a-d21a733bc323", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35998", "type": "seen", "source": "https://bsky.app/profile/thehackerwire.bsky.social/post/3meji7jhvne2g", "content": "", "creation_timestamp": "2026-02-10T17:25:36.311184Z"}, {"uuid": "4d3b3f3b-0cb9-427e-b42c-e800df5e47cb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "https://bsky.app/profile/undercode.bsky.social/post/3mcefqwppyy2t", "content": "", "creation_timestamp": "2026-01-14T06:07:55.776645Z"}, {"uuid": "57204736-b049-4cd7-a4ef-288b11738db4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "af0120d0-3dac-4a6a-974b-a9f33d2a9846", "vulnerability": "CVE-2025-35939", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/f495a171-40e0-4d88-8eb6-38045d33001b", "content": "", "creation_timestamp": "2026-02-02T12:26:00.058821Z"}, {"uuid": "36adff32-18b8-42df-9ae0-b6ae3d5af5aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "published-proof-of-concept", "source": "https://t.me/realcodeb0ss/204", "content": "", "creation_timestamp": "2025-12-05T22:04:30.000000Z"}, {"uuid": "b745c7cb-6247-4418-a820-237902e1f009", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3500", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/61311", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPublic exploit for CVE-2025-3500\nURL\uff1ahttps://github.com/negativklatton22/CVE-2025-3500-Exploit\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-12-01T20:07:57.000000Z"}, {"uuid": "b27fdccd-23d6-4a40-a258-eefabb16e260", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3500", "type": "published-proof-of-concept", "source": "Telegram/YayxELDr7bbgB7UjhDLw2luzrG44OM1tc-dUordibmBL6dY", "content": "", "creation_timestamp": "2025-12-02T03:00:06.000000Z"}, {"uuid": "70b16296-cf79-4c57-9cca-ce16b3991395", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3500", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/61312", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aPublic exploit for CVE-2025-3500\nURL\uff1ahttps://github.com/chicken3962/CVE-2025-3500-Poc\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-12-01T20:14:23.000000Z"}, {"uuid": "1c30aba1-e17e-4bf3-8223-62a5410c9dab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35004", "type": "published-proof-of-concept", "source": "Telegram/G5p0ZxgBHJPvrrOlkboQk4PzfxBFi8LKHLFE-2EiRTRCqd4", "content": "", "creation_timestamp": "2025-06-08T22:04:34.000000Z"}, {"uuid": "73503336-8c34-4159-9640-0e4cf8b94054", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35005", "type": "published-proof-of-concept", "source": "Telegram/G5p0ZxgBHJPvrrOlkboQk4PzfxBFi8LKHLFE-2EiRTRCqd4", "content": "", "creation_timestamp": "2025-06-08T22:04:34.000000Z"}, {"uuid": "14f5c594-52aa-4c4c-811d-4478473b04a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35006", "type": "published-proof-of-concept", "source": "Telegram/G5p0ZxgBHJPvrrOlkboQk4PzfxBFi8LKHLFE-2EiRTRCqd4", "content": "", "creation_timestamp": "2025-06-08T22:04:34.000000Z"}, {"uuid": "be8550c8-8cbc-4ccb-ae89-3289e5a1a5b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35978", "type": "published-proof-of-concept", "source": "Telegram/Tm6Qol0u5cfUT8rM5mRAIZu8ThMb_EKnlB7gUDiDo4ihIcE", "content": "", "creation_timestamp": "2025-06-12T10:53:51.000000Z"}, {"uuid": "4e3aa6b0-0d5c-42d2-b589-a64fafba6c49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35978", "type": "seen", "source": "Telegram/XmDJgel102u5mbWwjoCZWlC19dx6OL9l_HsRmMNLO9cNbQo", "content": "", "creation_timestamp": "2025-06-15T12:46:33.000000Z"}, {"uuid": "ab07f6a6-388e-4ecd-8ac6-3f3569582504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "Telegram/ONimq940-aml_-ziaQNnPitR2a4dvARau7ekaKGXqYn5E4A", "content": "", "creation_timestamp": "2025-06-17T10:01:14.000000Z"}, {"uuid": "582e7151-3422-4802-8805-b88fb34dd31b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35451", "type": "seen", "source": "https://t.me/canyoupwnme/6912", "content": "CVE-2025-35451 - Pan-Tilt-Zoom cameras hard-coded default passwords with SSH and telnet enabled\nhttps://cvefeed.io/vuln/detail/CVE-2025-35451", "creation_timestamp": "2025-09-05T20:10:42.000000Z"}, {"uuid": "62b7bd78-f505-4dc3-b218-65ef75c29010", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3511", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13384", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3511\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module and CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets.\n\ud83d\udccf Published: 2025-04-25T05:14:43.758Z\n\ud83d\udccf Modified: 2025-04-25T05:14:43.758Z\n\ud83d\udd17 References:\n1. https://www.mitsubishielectric.com/psirt/vulnerability/pdf/2025-001_en.pdf", "creation_timestamp": "2025-04-25T06:10:57.000000Z"}, {"uuid": "dbf56d52-3e69-4fc1-bfdc-f4885ba92afb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3510", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14436", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3510\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all versions up to, and including, 5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-02T03:21:18.095Z\n\ud83d\udccf Modified: 2025-05-02T03:21:18.095Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2bd6b66d-f33e-4287-850b-a199de72f6ad?source=cve\n2. https://tagdiv.com/newspaper-changelog/\n3. https://themeforest.net/item/newspaper/5489609\n4. https://tagdiv.com/tagdiv-composer-page-builder-basics/", "creation_timestamp": "2025-05-02T04:15:50.000000Z"}, {"uuid": "266859e6-33b9-43d4-a1dd-386283135a56", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3513", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14443", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3513\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The SureForms  WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-02T06:00:02.187Z\n\ud83d\udccf Modified: 2025-05-02T06:00:02.187Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/dd7e0bb3-4a98-4f62-bd2e-f30b27d71226/", "creation_timestamp": "2025-05-02T06:15:14.000000Z"}, {"uuid": "1097da54-c3c2-4606-9680-c930507c2df1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3514", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14442", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3514\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The SureForms  WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-02T06:00:02.905Z\n\ud83d\udccf Modified: 2025-05-02T06:00:02.905Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/fc3da503-a973-44d8-82d0-13539501f8c0/", "creation_timestamp": "2025-05-02T06:15:13.000000Z"}, {"uuid": "2e2271d8-55fd-4f72-b7d1-d79660325d3a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "Telegram/NZw_dyKg3sBl_OoVab8mtW04AyfXZ90mr3x5yRa5cUHgMy8", "content": "", "creation_timestamp": "2025-09-05T03:00:06.000000Z"}, {"uuid": "fbb4d498-0795-4766-846c-82cd0d9c4fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "86ecb4e1-bb32-44d5-9f39-8a4673af8385", "vulnerability": "CVE-2025-35036", "type": "seen", "source": "https://www.govcert.gov.hk/en/alerts_detail.php?id=1833", "content": "", "creation_timestamp": "2026-04-21T21:00:00.000000Z"}, {"uuid": "2ae43c42-28e2-4d32-b224-83cc0de93be8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "Telegram/nfGTp2xTn4QGBhVuPNna78NmZEMmW41bwCC35jvxvcYj_Bw", "content": "", "creation_timestamp": "2025-09-01T21:00:04.000000Z"}, {"uuid": "f192495a-68d8-4a45-8fdb-89c3d1ebd87e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35036", "type": "seen", "source": "https://bsky.app/profile/o2cloud.bsky.social/post/3mk3jwqt6xo2w", "content": "", "creation_timestamp": "2026-04-22T12:50:20.476541Z"}, {"uuid": "3f5d4aff-480e-4677-9428-7b0d5b62f348", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "Telegram/ktfF1YjAfTgGnV4T6AQBqxJFytPD6zIUM1POBEH3rhcPUWE", "content": "", "creation_timestamp": "2025-09-03T15:00:07.000000Z"}, {"uuid": "7491b491-988e-426a-b389-65c6d7b157a4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3501", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/13925", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3501\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N)\n\ud83d\udd39 Description: A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended.\n\ud83d\udccf Published: 2025-04-29T20:45:29.507Z\n\ud83d\udccf Modified: 2025-04-29T20:45:29.507Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-3501\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2358834", "creation_timestamp": "2025-04-29T21:13:26.000000Z"}, {"uuid": "0fa488c3-9bbd-4cb5-be84-dc814e724e78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35027", "type": "seen", "source": "https://t.me/VictoryDrones/52894", "content": "\u041f\u0440\u0438\u0432\u0435\u0442, \u0434\u043e\u0440\u043e\u0433\u0438\u0435 \u0447\u0438\u0442\u0430\u0442\u0435\u043b\u0438! \u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043d\u0430 \u0441\u0432\u044f\u0437\u0438\ud83d\udc4b\n\n\ud83e\udd14 \u0423\u0436\u0435 \u0438\u0437 \u043a\u0430\u0436\u0434\u043e\u0433\u043e \u0443\u0442\u044e\u0433\u0430 \u043c\u043e\u0436\u043d\u043e \u0443\u0441\u043b\u044b\u0448\u0430\u0442\u044c \u043f\u0440\u043e \u0437\u0430\u043c\u0435\u043d\u0443 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0438\u0441\u0442\u043e\u0432, appsec/\u043a\u0438\u0431\u0435\u0440\u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u0438\u043a\u043e\u0432, \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u0435\u0439, \u0430\u043d\u0430\u043b\u0438\u0442\u0438\u043a\u043e\u0432 \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435 \u0441 \u043f\u043e\u043c\u043e\u0449\u044c\u044e LLM. \u041c\u043e\u0436\u043d\u043e \u043d\u0430\u0439\u0442\u0438 \u043e\u0431\u0441\u0443\u0436\u0434\u0435\u043d\u0438\u044f \u043d\u0430 \u0444\u043e\u0440\u0443\u043c\u0430\u0445, \u0441\u043e\u0446\u0438\u0430\u043b\u044c\u043d\u044b\u0445 \u0441\u0435\u0442\u044f\u0445 \u0438 \u0440\u0430\u0437\u043d\u044b\u0445 \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0441\u0443\u0440\u0441\u043e\u0432, \u043a\u0430\u043a \u0441 \u043f\u0435\u043d\u043e\u0439 \u0443 \u0440\u0442\u0430 \u0434\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b LLM/VLM/ML/AI \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \n\n\ud83e\udd14 \u041f\u043e\u043a\u0430\u0437\u044b\u0432\u0430\u044e\u0442 \u0441\u0438\u043d\u0442\u0435\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0435 \u0431\u0435\u043d\u0447\u043c\u0430\u0440\u043a\u0438, \"\u0441\u0444\u0435\u0440\u0438\u0447\u0435\u0441\u043a\u043e\u0433\u043e \u043a\u043e\u043d\u044f \u0432 \u0432\u0430\u043a\u0443\u0443\u043c\u0435\", \u043a\u043e\u0434 \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u0438\u0442\u0430\u043a \u0443\u0436\u0435 \u0431\u044b\u043b \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d \u0431\u0435\u0437 LLM/MCP, \u043d\u0435\u0442\u043e\u0447\u043d\u044b\u0435 \u0440\u0430\u0441\u0447\u0451\u0442\u044b \u0438 \u043c\u043e\u0434\u0435\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 \u0442\u0430\u043a \u0434\u0430\u043b\u0435\u0435. \u0414\u0430, \u0435\u0441\u0442\u044c \u0431\u0435\u0441\u0441\u043f\u043e\u0440\u043d\u043e \u0438 \u0443\u0434\u0430\u0447\u043d\u044b\u0435 \u043f\u0440\u0438\u043c\u0435\u0440\u044b \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u044f, \u043d\u043e \u043e\u043f\u044b\u0442\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u041f\u041e\u041a\u0410 \u043d\u0435 \u0437\u0430\u043c\u0435\u043d\u044f\u044e\u0442. \u041e\u0434\u043d\u0430\u043a\u043e, \u043c\u0430\u0441\u0441\u043e\u0432\u044b\u0435 \u0443\u0432\u043e\u043b\u044c\u043d\u0435\u043d\u0438\u044f \u0438 \u0437\u0430\u043c\u0435\u043d\u0430 \u043d\u0430 LLM/MCP, \u043f\u0440\u0438\u0432\u0435\u0434\u0451\u0442 \u043a \u0442\u043e\u043c\u0443, \u0447\u0442\u043e \u043d\u043e\u0432\u044b\u0445 \u043a\u0432\u0430\u043b\u0438\u0444\u0438\u0446\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0445 \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u0438\u0441\u0442\u043e\u0432 \u0431\u0443\u0434\u0435\u0442 \u043d\u0435\u043c\u043d\u043e\u0433\u043e(\u0442\u043e\u0447\u043d\u0435\u0435 \u0435\u0449\u0451 \u043c\u0435\u043d\u044c\u0448\u0435), \u0430 \u0432 \u0441\u0438\u043b\u0443 \u0442\u043e\u0433\u043e, \u0447\u0442\u043e \u043c\u043e\u0434\u0435\u043b\u0438 \u0431\u0443\u0434\u0443\u0442 \u043e\u0431\u0443\u0447\u0430\u0442\u044c\u0441\u044f \u043d\u0430 \u0441\u0435\u0431\u0435(\u0441\u0438\u043d\u0442\u0435\u0442\u0438\u043a\u0430), \u0442\u043e \u043d\u0435\u0438\u0437\u0431\u0435\u0436\u043d\u0430 \u0434\u0435\u0433\u0440\u0430\u0434\u0430\u0446\u0438\u044f.\n\n\u0414\u043b\u044f \u0438\u043d\u0442\u0435\u0440\u0435\u0441\u0430 \u043c\u043e\u0436\u0435\u0442\u0435 \u0432 Opus 4.6, ChatGPT 5.2, Grok 4.1/4.20/Heavy, Gemini 3 pro/flash preview, Qwen3.5, DeepSeek V3.2 \u0438 \u0434\u0440\u0443\u0433\u0438\u043c \u043c\u043e\u0434\u0435\u043b\u044f\u043c/\u0430\u0433\u0435\u043d\u0442\u0430\u043c \"\u0441\u043a\u043e\u0440\u043c\u0438\u0442\u044c\" \u043f\u0440\u0438\u043a\u043b\u0430\u0434\u043d\u044b\u0435 \u0437\u0430\u0434\u0430\u0447\u0438 \u043f\u043e \u0444\u0438\u0437\u0438\u043a\u0435, \u043c\u0430\u0442\u0435\u043c\u0430\u0442\u0438\u043a\u0435, \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e, \u0430\u0432\u0438\u0430\u0441\u0442\u0440\u043e\u0435\u043d\u0438\u044e \u0438 \u0443\u0432\u0438\u0434\u0438\u0442\u0435... \u043d\u0430\u0441\u043a\u043e\u043b\u044c\u043a\u043e \u0441\u0438\u043b\u044c\u043d\u043e \u043e\u043d\u0438 \u043e\u0448\u0438\u0431\u0430\u044e\u0442\u0441\u044f \u0435\u0441\u043b\u0438 \u0440\u0435\u0448\u0435\u043d\u0438\u044f \u043d\u0435\u0442 \u0432 \u0441\u0435\u0442\u0438. \u041d\u0435 \u043d\u0443\u0436\u043d\u043e \u0432\u0435\u0440\u0438\u0442\u044c \u043d\u0430\u043c \u043d\u0430 \u0441\u043b\u043e\u0432\u043e, \u043f\u0440\u043e\u0441\u0442\u043e \u0432\u043e\u0437\u044c\u043c\u0438\u0442\u0435 \u0442\u043e, \u043a \u0447\u0435\u043c\u0443 \u043d\u0435\u0442 \u043e\u0442\u0432\u0435\u0442\u043e\u0432 \u0432 \u043e\u0442\u043a\u0440\u044b\u0442\u043e\u043c \u0434\u043e\u0441\u0442\u0443\u043f\u0435.\n\n\u041f\u0435\u0440\u0435\u0439\u0434\u0451\u043c \u043a \u0442\u0435\u043c\u0435 \u0434\u0430\u043d\u043d\u043e\u0439 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 - \u0442\u0440\u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0445 \"\u0442\u043e\u0447\u043a\u0438 \u0432\u0445\u043e\u0434\u0430\" \u0432 \u043b\u043e\u0433\u0438\u043a\u0435 \u0431\u043b\u0438\u0436\u043d\u0435\u0433\u043e \u0440\u0430\u0434\u0438\u043e/\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0448\u0438\u043d\u044b \u0432 \u0438\u0437\u0432\u0435\u0441\u0442\u043d\u044b\u0445 \u0440\u043e\u0431\u043e\u0442\u0430\u0445 \u043e\u0442 Unitree. \n\nBLE-\u043a\u043e\u043d\u0442\u0443\u0440 \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 Wi-Fi(CVE-2025-35027, CVE-2025-60017, CVE-2025-60250 \u0438 CVE-2025-60251): \u043d\u0430 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445 Go2/G1/H1/B2 \u043f\u043e\u0434\u043d\u044f\u0442 \u043a\u0430\u0441\u0442\u043e\u043c\u043d\u044b\u0439 BLE-\u0441\u0435\u0440\u0432\u0438\u0441 (0000ffe0-0000-1000-8000-00805f9b34fb, \u0437\u0430\u043f\u0438\u0441\u044c 0000ffe2-0000-1000-8000-00805f9b34fb, \u0443\u0432\u0435\u0434\u043e\u043c\u043b\u0435\u043d\u0438\u044f 0000ffe1-0000-1000-8000-00805f9b34fb), \u0433\u0434\u0435 \u0432\u0445\u043e\u0434\u044f\u0449\u0438\u0435 \u043f\u0430\u043a\u0435\u0442\u044b \u0440\u0430\u0441\u0448\u0438\u0444\u0440\u043e\u0432\u044b\u0432\u0430\u044e\u0442\u0441\u044f AES-CFB128 \u0441 \u0436\u0451\u0441\u0442\u043a\u043e \u0437\u0430\u0448\u0438\u0442\u044b\u043c \u043a\u043b\u044e\u0447\u043e\u043c \u0438 \u0432\u0435\u043a\u0442\u043e\u0440\u043e\u043c (\u043e\u0434\u043d\u0438 \u0438 \u0442\u0435 \u0436\u0435 \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u0432 \u043f\u0440\u043e\u0448\u0438\u0432\u043a\u0435), \u0430 \"\u0434\u043e\u0441\u0442\u0443\u043f\" \u0441\u0432\u043e\u0434\u0438\u0442\u0441\u044f \u043a \u0442\u0440\u0438\u0432\u0438\u0430\u043b\u044c\u043d\u043e\u043c\u0443 \u043c\u0430\u0440\u043a\u0435\u0440\u0443 unitree; \u0434\u0430\u043b\u044c\u0448\u0435 \u043f\u043e\u043b\u044f \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 Wi-Fi \u0434\u043e\u0445\u043e\u0434\u044f\u0442 \u0434\u043e \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430 \u0441\u0435\u0440\u0432\u0438\u0441\u0430 \u0447\u0435\u0440\u0435\u0437 system() - \u0442\u043e \u0435\u0441\u0442\u044c \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u043a\u043b\u0430\u0441\u0441\u0430 \u043a\u043e\u043c\u0430\u043d\u0434\u043d\u0430\u044f \u0438\u043d\u044a\u0435\u043a\u0446\u0438\u044f \u0441 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435\u043c \u043a\u043e\u043c\u0430\u043d\u0434 \u043e\u0442 root \u0432 \u0446\u0435\u043f\u043e\u0447\u043a\u0435 \"\u0440\u0430\u0434\u0438\u043e -> \u0434\u0435\u043c\u043e\u043d \u043d\u0430\u0441\u0442\u0440\u043e\u0439\u043a\u0438 -> \u0441\u043a\u0440\u0438\u043f\u0442 \u043f\u0435\u0440\u0435\u0437\u0430\u043f\u0443\u0441\u043a\u0430\". \u041e\u0442\u0434\u0435\u043b\u044c\u043d\u043e: \"\u0441\u0430\u043c\u043e\u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043d\u0430 \u0441\u043e\u0441\u0435\u0434\u043d\u0438\u0435 \u0440\u043e\u0431\u043e\u0442\u044b\" \u0432 UniPwn \u043e\u043f\u0438\u0441\u0430\u043d\u043e \u043a\u0430\u043a \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c \u043a\u0430\u0441\u043a\u0430\u0434\u043d\u043e\u0433\u043e \u0440\u0430\u0441\u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u044f \u043f\u0440\u0438 \u043d\u0430\u043b\u0438\u0447\u0438\u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430/\u0441\u0446\u0435\u043d\u0430\u0440\u0438\u0439 \u043f\u043e\u0441\u043b\u0435 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u0438\u044f root, \u043d\u043e \u044d\u0442\u043e \u0443\u0436\u0435 \u043d\u0435 \u0441\u0432\u043e\u0439\u0441\u0442\u0432\u043e \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430, \u0430 \u0441\u043b\u0435\u0434\u0441\u0442\u0432\u0438\u0435 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438.\n\n\u041a\u043e\u043d\u0442\u0443\u0440 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u0439 UPK (CVE-2026-1442, UniTEABag): \u0434\u043e\u0432\u0435\u0440\u0438\u0435 \u043a \u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u044e \u0432\u043c\u0435\u0441\u0442\u043e \u043f\u043e\u0434\u043f\u0438\u0441\u0438. \u0412 \u0440\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0438 AHA! \u043f\u043e UPK \u043f\u043e\u043a\u0430\u0437\u0430\u043d\u043e, \u0447\u0442\u043e \u043f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u043d\u0430\u0433\u0440\u0443\u0437\u043a\u0430 \u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f \u0448\u0438\u0444\u0440\u0443\u0435\u0442\u0441\u044f TEA, \u0430 \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u043c\u0430\u0442\u0435\u0440\u0438\u0430\u043b \u0434\u043e\u0441\u0442\u0443\u043f\u0435\u043d \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0435\u043c\u0443 (\u043f\u043e \u0441\u0443\u0442\u0438 - \"\u0437\u0430\u0448\u0438\u0442\" \u0432 \u044d\u043a\u043e\u0441\u0438\u0441\u0442\u0435\u043c\u0435), \u043f\u043e\u044d\u0442\u043e\u043c\u0443 \u043f\u0430\u043a\u0435\u0442\u044b \u043c\u043e\u0436\u043d\u043e \u0438\u0437\u043c\u0435\u043d\u044f\u0442\u044c \u0438 \u0437\u0430\u0442\u0435\u043c \u043e\u043d\u0438 \u0431\u0443\u0434\u0443\u0442 \u043f\u0440\u0438\u043d\u0438\u043c\u0430\u0442\u044c\u0441\u044f \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u043e\u043c \u043a\u0430\u043a \u0434\u043e\u0432\u0435\u0440\u0435\u043d\u043d\u044b\u0435; \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u0430 UPK \u0432\u043a\u043b\u044e\u0447\u0430\u0435\u0442 UTPK-\u0437\u0430\u0433\u043e\u043b\u043e\u0432\u043e\u043a, \u043c\u0435\u0442\u0430\u0434\u0430\u043d\u043d\u044b\u0435, TEA-\u0448\u0438\u0444\u0440\u043e\u0432\u0430\u043d\u0438\u0435 \u0438 MD5 \u043a\u0430\u043a \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044c/\"\u043f\u043e\u0434\u043f\u0438\u0441\u044c\". \u041a\u0440\u0438\u0442\u0438\u0447\u043d\u0430\u044f \u043e\u0433\u043e\u0432\u043e\u0440\u043a\u0430 \u0438\u0437 \u0442\u043e\u0433\u043e \u0436\u0435 \u0438\u0441\u0442\u043e\u0447\u043d\u0438\u043a\u0430: \u043d\u0430 \u043c\u043e\u043c\u0435\u043d\u0442 \u043f\u0443\u0431\u043b\u0438\u043a\u0430\u0446\u0438\u0438 \u043d\u0435\u0442 \u043f\u0443\u0431\u043b\u0438\u0447\u043d\u043e \u043e\u043f\u0438\u0441\u0430\u043d\u043d\u043e\u0433\u043e \u043c\u0435\u0445\u0430\u043d\u0438\u0437\u043c\u0430 \u043d\u0435\u0437\u0430\u043c\u0435\u0442\u043d\u043e \"\u043f\u043e\u0434\u0441\u0443\u043d\u0443\u0442\u044c\" \u043e\u0442\u0440\u0430\u0432\u043b\u0451\u043d\u043d\u044b\u0439 \u043f\u0430\u043a\u0435\u0442 \u0431\u0435\u0437 \u0443\u0447\u0430\u0441\u0442\u0438\u044f \u0432\u043b\u0430\u0434\u0435\u043b\u044c\u0446\u0430/\u0441\u0435\u0440\u0432\u0438\u0441\u0430 - \u0442\u043e \u0435\u0441\u0442\u044c \u0440\u0438\u0441\u043a \u043f\u0440\u0435\u0436\u0434\u0435 \u0432\u0441\u0435\u0433\u043e \u043f\u0440\u043e \u0446\u0435\u043b\u043e\u0441\u0442\u043d\u043e\u0441\u0442\u044c \u0446\u0435\u043f\u043e\u0447\u043a\u0438 \u043e\u0431\u043d\u043e\u0432\u043b\u0435\u043d\u0438\u044f (\u043f\u043e\u0441\u0442\u0430\u0432\u043a\u0430/\u0441\u0435\u0440\u0432\u0438\u0441/\u043b\u043e\u043a\u0430\u043b\u044c\u043d\u0430\u044f \u0437\u0430\u0433\u0440\u0443\u0437\u043a\u0430), \u0430 \u043d\u0435 \u043f\u0440\u043e \u0433\u0430\u0440\u0430\u043d\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0437\u0430\u0445\u0432\u0430\u0442 \"\u043f\u043e \u0432\u043e\u0437\u0434\u0443\u0445\u0443\".\n\nDDS-\u0448\u0438\u043d\u0430 (\u0434\u043e\u043c\u0435\u043d 0) \u0438 \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u043a\u043e\u0434\u0430(RCE): \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u043a\u043e\u043d\u0442\u0440\u043e\u043b\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u0430 \u043d\u0430 \u043b\u043e\u043a\u0430\u043b\u044c\u043d\u043e\u0439 \u0441\u0435\u0442\u0438. \u0412 \u043e\u0442\u0447\u0451\u0442\u0435 \u043f\u043e Go2 \u043e\u043f\u0438\u0441\u0430\u043d\u044b \u0434\u0432\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0443\u0434\u0430\u043b\u0451\u043d\u043d\u043e\u0433\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044f \u043a\u043e\u0434\u0430 (RCE, CVE-2026-27509/-27510) \u0438 \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0451\u043d\u043d\u044b\u0435 \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b\u0435 \u0432\u0435\u0440\u0441\u0438\u0438: V1.1.7 - V1.1.9 \u0438 V1.1.11 (EDU); \u043a\u043b\u044e\u0447\u0435\u0432\u043e\u0439 \u0442\u0435\u0445\u043d\u0438\u0447\u0435\u0441\u043a\u0438\u0439 \u0441\u043c\u044b\u0441\u043b - \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u0435/\u043d\u0435\u0434\u043e\u0441\u0442\u0430\u0442\u043e\u0447\u043d\u043e\u0441\u0442\u044c \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u0438 \u0438 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u0430\u0446\u0438\u0438 \u0432 DDS-\u043a\u043e\u043d\u0442\u0443\u0440\u0435 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u0441\u0431\u043e\u0440\u043a\u0430\u0445, \u0447\u0442\u043e \u0434\u0435\u043b\u0430\u0435\u0442 \u0430\u0442\u0430\u043a\u0443 \"\u0441\u0435\u0442\u0435\u0432\u043e-\u0441\u043c\u0435\u0436\u043d\u043e\u0439\" (\u043a\u0442\u043e \u043f\u043e\u043f\u0430\u043b \u0432 \u0442\u043e\u0442 \u0436\u0435 \u0441\u0435\u0433\u043c\u0435\u043d\u0442/\u0434\u043e\u043c\u0435\u043d - \u0442\u043e\u0442 \u0432\u043b\u0438\u044f\u0435\u0442 \u043d\u0430 \u0443\u043f\u0440\u0430\u0432\u043b\u044f\u044e\u0449\u0438\u0435 \u0442\u043e\u043f\u0438\u043a\u0438/\u043e\u0431\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u0438). \u0410\u0432\u0442\u043e\u0440\u044b \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u043e \u043e\u0442\u043c\u0435\u0447\u0430\u044e\u0442 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u044f \u0432 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438 \u0438 \u0432\u044b\u043f\u0443\u0441\u043a \u043f\u0430\u0442\u0447\u0435\u0439 \u0432 \u0432\u0435\u0442\u043a\u0435 V1.1.13 \u0434\u043b\u044f \u0447\u0430\u0441\u0442\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0430 \u0442\u0430\u043a\u0436\u0435 \u0442\u043e, \u0447\u0442\u043e EDU-\u0432\u0430\u0440\u0438\u0430\u043d\u0442\u044b \u043c\u043e\u0433\u0443\u0442 \u043e\u0441\u0442\u0430\u0432\u0430\u0442\u044c\u0441\u044f \u043e\u0442\u0434\u0435\u043b\u044c\u043d\u044b\u043c \u0440\u0438\u0441\u043a\u043e\u043c \u043f\u043e \u0442\u0440\u0435\u0431\u043e\u0432\u0430\u043d\u0438\u044f\u043c \u043f\u0440\u043e\u0434\u0443\u043a\u0442\u0430.\n\n\u0437.\u044b.: \u0430 \u043a \u0447\u0435\u043c\u0443 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u043c\u044b \u0440\u0430\u0441\u0441\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u0440\u043e \u044d\u0442\u0438 \u0441\u0432\u0435\u0436\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438? \u0414\u0430\u043d\u043d\u044b\u0435 \u0440\u043e\u0431\u043e\u0442\u044b \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u044e\u0442\u0441\u044f \u043f\u043e\u043b\u0438\u0446\u0438\u0435\u0439 \u0438 \u0432\u043e\u0435\u043d\u043d\u044b\u043c\u0438 \u0434\u0440\u0443\u0433\u0438\u0445 \u0441\u0442\u0440\u0430\u043d, \u0434\u043e\u0432\u043e\u043b\u044c\u043d\u043e \u043a\u0440\u0443\u043f\u043d\u0430\u044f \u043a\u043e\u043c\u043f\u0430\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043c\u043d\u043e\u0433\u043e \u0432\u043a\u043b\u0430\u0434\u044b\u0432\u0430\u0435\u0442 \u0432 \u043c\u0430\u0440\u043a\u0435\u0442\u0438\u043d\u0433 \u0438 \u0434\u0438\u0437\u0430\u0439\u043d. \u0414\u0430\u043b\u044c\u0448\u0435 - \u0434\u0435\u043b\u0430\u0439\u0442\u0435 \u0432\u044b\u0432\u043e\u0434\u044b \u0441\u0430\u043c\u0438.\n\n\u2b50\ufe0f\u041f\u043e\u043b\u0435\u0437\u043d\u0430\u044f \u041d\u0430\u0433\u0440\u0443\u0437\u043a\u0430", "creation_timestamp": "2026-02-27T23:27:41.000000Z"}, {"uuid": "2da22463-3687-4aa8-b7a6-0a063f6d3f1b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35430", "type": "seen", "source": "https://t.me/true_secator/7979", "content": "OpenAI \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e Codex Security\u00a0- \u0430\u0433\u0435\u043d\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043f\u043e\u0438\u0441\u043a, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\u042d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 ChatGPT Pro, Enterprise, Business \u0438 Edu \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Codex \u0441 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430.\n\nCodex Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u044e Aardvark, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 OpenAI \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435  \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 30 \u0434\u043d\u0435\u0439 \u0432 \u0445\u043e\u0434\u0435 \u0431\u0435\u0442\u0430-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Codex Security \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 1,2 \u043c\u043b\u043d. \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u0432\u044b\u044f\u0432\u0438\u0432 792 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 10 561 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f OpenSSH, GnuTLS, GOGS, Thorium, libssh, PHP \u0438 Chromium, \u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0440.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0437 \u043d\u0438\u0445: GnuPG (CVE-2026-24881, CVE-2026-24882), GnuTLS (CVE-2025-32988, CVE-2025-32989), GOGS (CVE-2025-64175, CVE-2026-25242) \u0438 Thorium\u00a0(CVE-2025-35430 - CVE-2025-35436)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c OpenAI, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0435\u0435 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c\u0438 \u043c\u043e\u0434\u0435\u043b\u044f\u043c\u0438, \u0438 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0438\u0445 \u0441 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439, \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u0443\u044f \u0440\u0438\u0441\u043a\u0438 \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 OpenAI \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u0438\u0445 \u0438 \u0442\u0435\u0445 \u0436\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043e\u0442\u044b \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u043b\u0430\u0441\u044c \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 50% \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445.\n\nOpenAI \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e Codex Security \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c.\u00a0\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u0433\u0435\u043d\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0442\u0440\u0438 \u044d\u0442\u0430\u043f\u0430: \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0443\u0433\u0440\u043e\u0437, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043c\u0435\u0441\u0442\u0430 \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c\u0438 \u0430\u0441\u043f\u0435\u043a\u0442\u0430\u043c\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 Codex Security \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041d\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0438\u043b\u0443\u0447\u0448\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u044f \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u0439, \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u043e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418 - \u043d\u0435 \u043d\u043e\u0432\u0438\u043d\u043a\u0430.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e Claude \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - Claude Code Security. GitHub \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442, \u0430 Google\u00a0\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043e\u0431\u0438\u043b\u0430\u0441\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0435\u0441\u0441\u0430 \u0432 \u044d\u0442\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438.", "creation_timestamp": "2026-03-10T17:00:08.000000Z"}, {"uuid": "24bbd05d-e0fb-4a89-9855-58ad25856d78", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35436", "type": "seen", "source": "https://t.me/true_secator/7979", "content": "OpenAI \u043f\u0440\u0438\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u043a \u0440\u0430\u0437\u0432\u0435\u0440\u0442\u044b\u0432\u0430\u043d\u0438\u044e Codex Security\u00a0- \u0430\u0433\u0435\u043d\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 \u043d\u0430\u0446\u0435\u043b\u0435\u043d \u043d\u0430 \u043f\u043e\u0438\u0441\u043a, \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u0443\u0441\u0442\u0440\u0430\u043d\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u044b\u0445 \u0441 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044f\u043c\u0438.\n\n\u042d\u0442\u0430 \u0444\u0443\u043d\u043a\u0446\u0438\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0439 \u0438\u0441\u0441\u043b\u0435\u0434\u043e\u0432\u0430\u0442\u0435\u043b\u044c\u0441\u043a\u043e\u0439 \u0432\u0435\u0440\u0441\u0438\u0438 \u0434\u043b\u044f \u043a\u043b\u0438\u0435\u043d\u0442\u043e\u0432 ChatGPT Pro, Enterprise, Business \u0438 Edu \u0447\u0435\u0440\u0435\u0437 \u0432\u0435\u0431-\u0438\u043d\u0442\u0435\u0440\u0444\u0435\u0439\u0441 Codex \u0441 \u0431\u0435\u0441\u043f\u043b\u0430\u0442\u043d\u044b\u043c \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0435\u043c \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u0441\u043b\u0435\u0434\u0443\u044e\u0449\u0435\u0433\u043e \u043c\u0435\u0441\u044f\u0446\u0430.\n\nCodex Security \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u0435\u0442 \u0441\u043e\u0431\u043e\u0439 \u044d\u0432\u043e\u043b\u044e\u0446\u0438\u044e Aardvark, \u043a\u043e\u0442\u043e\u0440\u044b\u0439 OpenAI \u0430\u043d\u043e\u043d\u0441\u0438\u0440\u043e\u0432\u0430\u043b\u0430 \u0432 \u0440\u0430\u043c\u043a\u0430\u0445 \u0437\u0430\u043a\u0440\u044b\u0442\u044b\u0445 \u0442\u0435\u0441\u0442\u043e\u0432 \u0432 \u043e\u043a\u0442\u044f\u0431\u0440\u0435 2025 \u0433\u043e\u0434\u0430 \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435  \u0438\u043d\u0441\u0442\u0440\u0443\u043c\u0435\u043d\u0442\u0430 \u0434\u043b\u044f \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0447\u0438\u043a\u043e\u0432 \u043f\u043e \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044e \u0438 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044e \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 \u0431\u043e\u043b\u044c\u0448\u0438\u0445 \u043c\u0430\u0441\u0448\u0442\u0430\u0431\u0430\u0445.\n\n\u0417\u0430 \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 30 \u0434\u043d\u0435\u0439 \u0432 \u0445\u043e\u0434\u0435 \u0431\u0435\u0442\u0430-\u0442\u0435\u0441\u0442\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f Codex Security \u043f\u0440\u043e\u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043b \u0431\u043e\u043b\u0435\u0435 1,2 \u043c\u043b\u043d. \u043a\u043e\u043c\u043c\u0438\u0442\u043e\u0432 \u0432\u043e \u0432\u043d\u0435\u0448\u043d\u0438\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445, \u0432\u044b\u044f\u0432\u0438\u0432 792 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0438\u0445 \u0438 10 561 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438.\n\n\u041a \u043d\u0438\u043c \u043e\u0442\u043d\u043e\u0441\u044f\u0442\u0441\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432 \u0440\u0430\u0437\u043b\u0438\u0447\u043d\u044b\u0445 \u043f\u0440\u043e\u0435\u043a\u0442\u0430\u0445 \u0441 \u043e\u0442\u043a\u0440\u044b\u0442\u044b\u043c \u0438\u0441\u0445\u043e\u0434\u043d\u044b\u043c \u043a\u043e\u0434\u043e\u043c, \u0432\u043a\u043b\u044e\u0447\u0430\u044f OpenSSH, GnuTLS, GOGS, Thorium, libssh, PHP \u0438 Chromium, \u0438 \u043c\u043d\u043e\u0433\u0438\u0445 \u0434\u0440.\n\n\u0421\u0440\u0435\u0434\u0438 \u043d\u0435\u043a\u043e\u0442\u043e\u0440\u044b\u0445 \u0438\u0437 \u043d\u0438\u0445: GnuPG (CVE-2026-24881, CVE-2026-24882), GnuTLS (CVE-2025-32988, CVE-2025-32989), GOGS (CVE-2025-64175, CVE-2026-25242) \u0438 Thorium\u00a0(CVE-2025-35430 - CVE-2025-35436)\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c OpenAI, \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0432\u0435\u0440\u0441\u0438\u044f \u0430\u0433\u0435\u043d\u0442\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u043f\u0440\u0438\u043b\u043e\u0436\u0435\u043d\u0438\u0439 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0430\u043d\u0430\u043b\u0438\u0437\u0430, \u043e\u0431\u0435\u0441\u043f\u0435\u0447\u0438\u0432\u0430\u0435\u043c\u044b\u0435 \u0435\u0435 \u043f\u0435\u0440\u0435\u0434\u043e\u0432\u044b\u043c\u0438 \u043c\u043e\u0434\u0435\u043b\u044f\u043c\u0438, \u0438 \u0441\u043e\u0447\u0435\u0442\u0430\u0435\u0442 \u0438\u0445 \u0441 \u0430\u0432\u0442\u043e\u043c\u0430\u0442\u0438\u0447\u0435\u0441\u043a\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u043e\u0439, \u043c\u0438\u043d\u0438\u043c\u0438\u0437\u0438\u0440\u0443\u044f \u0440\u0438\u0441\u043a\u0438 \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439 \u0438 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u044f\u044f \u0431\u043e\u043b\u0435\u0435 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u044b\u0435 \u0440\u0435\u0448\u0435\u043d\u0438\u044f.\n\n\u041f\u0440\u043e\u0432\u0435\u0434\u0435\u043d\u043d\u044b\u0435 OpenAI \u0432 \u0442\u0435\u0447\u0435\u043d\u0438\u0435 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u043e\u0433\u043e \u043f\u0435\u0440\u0438\u043e\u0434\u0430 \u0432\u0440\u0435\u043c\u0435\u043d\u0438 \u0441\u043a\u0430\u043d\u0438\u0440\u043e\u0432\u0430\u043d\u0438\u044f \u043e\u0434\u043d\u0438\u0445 \u0438 \u0442\u0435\u0445 \u0436\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432 \u043f\u043e\u043a\u0430\u0437\u0430\u043b\u0438 \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u0435 \u0442\u043e\u0447\u043d\u043e\u0441\u0442\u0438 \u0438 \u0441\u043d\u0438\u0436\u0435\u043d\u0438\u0435 \u0447\u0430\u0441\u0442\u043e\u0442\u044b \u043b\u043e\u0436\u043d\u044b\u0445 \u0441\u0440\u0430\u0431\u0430\u0442\u044b\u0432\u0430\u043d\u0438\u0439, \u043f\u0440\u0438\u0447\u0435\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u044f\u044f \u0443\u043c\u0435\u043d\u044c\u0448\u0438\u043b\u0430\u0441\u044c \u0431\u043e\u043b\u0435\u0435 \u0447\u0435\u043c \u043d\u0430 50% \u0432\u043e \u0432\u0441\u0435\u0445 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u044f\u0445.\n\nOpenAI \u0437\u0430\u044f\u0432\u043b\u044f\u0435\u0442, \u0447\u0442\u043e Codex Security \u0440\u0430\u0437\u0440\u0430\u0431\u043e\u0442\u0430\u043d \u0434\u043b\u044f \u043f\u043e\u0432\u044b\u0448\u0435\u043d\u0438\u044f \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0437\u0430 \u0441\u0447\u0435\u0442 \u0430\u043d\u0430\u043b\u0438\u0437\u0430 \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 \u0438 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u043e\u043b\u0443\u0447\u0435\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u043f\u0435\u0440\u0435\u0434 \u0438\u0445 \u043f\u0440\u0435\u0434\u043e\u0441\u0442\u0430\u0432\u043b\u0435\u043d\u0438\u0435\u043c \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f\u043c.\u00a0\n\n\u0412 \u0447\u0430\u0441\u0442\u043d\u043e\u0441\u0442\u0438, \u0430\u0433\u0435\u043d\u0442 \u0440\u0430\u0431\u043e\u0442\u0430\u0435\u0442 \u0432 \u0442\u0440\u0438 \u044d\u0442\u0430\u043f\u0430: \u0430\u043d\u0430\u043b\u0438\u0437\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0439 \u0434\u043b\u044f \u043f\u043e\u043d\u0438\u043c\u0430\u043d\u0438\u044f \u0441\u0442\u0440\u0443\u043a\u0442\u0443\u0440\u044b \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0441\u0432\u044f\u0437\u0430\u043d\u043d\u043e\u0439 \u0441 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u044c\u044e \u043f\u0440\u043e\u0435\u043a\u0442\u0430, \u0433\u0435\u043d\u0435\u0440\u0438\u0440\u0443\u0435\u0442 \u0440\u0435\u0434\u0430\u043a\u0442\u0438\u0440\u0443\u0435\u043c\u0443\u044e \u043c\u043e\u0434\u0435\u043b\u044c \u0443\u0433\u0440\u043e\u0437, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043e\u043f\u0438\u0441\u044b\u0432\u0430\u0435\u0442 \u0435\u0433\u043e \u0434\u0435\u0439\u0441\u0442\u0432\u0438\u044f \u0438 \u043c\u0435\u0441\u0442\u0430 \u0441 \u043d\u0430\u0438\u0431\u043e\u043b\u044c\u0448\u0438\u043c\u0438 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u043d\u044b\u043c\u0438 \u0430\u0441\u043f\u0435\u043a\u0442\u0430\u043c\u0438.\n\n\u041f\u043e\u0441\u043b\u0435 \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044f \u0441\u0438\u0441\u0442\u0435\u043c\u043d\u043e\u0433\u043e \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0430 Codex Security \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u0443\u0435\u0442 \u0435\u0433\u043e \u0432 \u043a\u0430\u0447\u0435\u0441\u0442\u0432\u0435 \u043e\u0441\u043d\u043e\u0432\u044b \u0434\u043b\u044f \u0432\u044b\u044f\u0432\u043b\u0435\u043d\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u0438 \u043a\u043b\u0430\u0441\u0441\u0438\u0444\u0438\u0446\u0438\u0440\u0443\u0435\u0442 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0438\u0445 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0433\u043e \u0432\u043b\u0438\u044f\u043d\u0438\u044f.\n\n\u0412\u044b\u044f\u0432\u043b\u0435\u043d\u043d\u044b\u0435 \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u044b \u043f\u0440\u043e\u0445\u043e\u0434\u044f\u0442 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0432 \u0438\u0437\u043e\u043b\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u043e\u0439 \u0441\u0440\u0435\u0434\u0435 \u0434\u043b\u044f \u043f\u043e\u0434\u0442\u0432\u0435\u0440\u0436\u0434\u0435\u043d\u0438\u044f \u0438\u0445 \u044d\u0444\u0444\u0435\u043a\u0442\u0438\u0432\u043d\u043e\u0441\u0442\u0438 \u0441 \u0443\u0447\u0435\u0442\u043e\u043c \u043e\u0441\u043e\u0431\u0435\u043d\u043d\u043e\u0441\u0442\u0435\u0439 \u043f\u0440\u043e\u0435\u043a\u0442\u0430 \u0438 \u043d\u0435\u043f\u043e\u0441\u0440\u0435\u0434\u0441\u0442\u0432\u0435\u043d\u043d\u043e \u0432 \u043a\u043e\u043d\u0442\u0435\u043a\u0441\u0442\u0435 \u0440\u0430\u0431\u043e\u0442\u0430\u044e\u0449\u0435\u0439 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u041d\u0430 \u0437\u0430\u043a\u043b\u044e\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u043c \u044d\u0442\u0430\u043f\u0435 \u0430\u0433\u0435\u043d\u0442 \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u0440\u0435\u0448\u0435\u043d\u0438\u044f, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u043d\u0430\u0438\u043b\u0443\u0447\u0448\u0438\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c \u0441\u043e\u043e\u0442\u0432\u0435\u0442\u0441\u0442\u0432\u0443\u044e\u0442 \u043f\u043e\u0432\u0435\u0434\u0435\u043d\u0438\u044e \u0441\u0438\u0441\u0442\u0435\u043c\u044b, \u0443\u043c\u0435\u043d\u044c\u0448\u0430\u044f \u043a\u043e\u043b\u0438\u0447\u0435\u0441\u0442\u0432\u043e \u0440\u0435\u0433\u0440\u0435\u0441\u0441\u0438\u0439, \u0443\u043f\u0440\u043e\u0449\u0430\u044f \u0438\u0445 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0443 \u0438 \u0432\u043d\u0435\u0434\u0440\u0435\u043d\u0438\u0435.\n\n\u0412 \u0446\u0435\u043b\u043e\u043c, \u043e\u0442\u043c\u0435\u0442\u0438\u043c, \u0447\u0442\u043e \u0441\u043a\u0430\u043d\u0435\u0440\u044b \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u0418\u0418 - \u043d\u0435 \u043d\u043e\u0432\u0438\u043d\u043a\u0430.\n\n\u041d\u0435\u0434\u0430\u0432\u043d\u043e Claude \u0442\u0430\u043a\u0436\u0435 \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u0438\u043b\u0430 \u0441\u043e\u0431\u0441\u0442\u0432\u0435\u043d\u043d\u044b\u0439 \u0441\u043a\u0430\u043d\u0435\u0440 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0435\u0439 - Claude Code Security. GitHub \u043f\u0440\u0435\u0434\u043b\u0430\u0433\u0430\u0435\u0442 \u043f\u043e\u0434\u043e\u0431\u043d\u044b\u0435 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0443\u0436\u0435 \u043c\u043d\u043e\u0433\u043e \u043b\u0435\u0442, \u0430 Google\u00a0\u0443\u0442\u0432\u0435\u0440\u0436\u0434\u0430\u0435\u0442, \u0447\u0442\u043e \u0434\u043e\u0431\u0438\u043b\u0430\u0441\u044c \u0437\u043d\u0430\u0447\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0433\u0440\u0435\u0441\u0441\u0430 \u0432 \u044d\u0442\u043e\u0439 \u043e\u0431\u043b\u0430\u0441\u0442\u0438.", "creation_timestamp": "2026-03-10T17:00:08.000000Z"}, {"uuid": "cee4fb01-9fac-4013-91b7-74e054961d8f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3599", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14090", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3599\n\ud83d\udd25 CVSS Score: 6.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user.\n\ud83d\udccf Published: 2025-04-30T16:49:18.064Z\n\ud83d\udccf Modified: 2025-04-30T16:49:18.064Z\n\ud83d\udd17 References:\n1. https://support.broadcom.com/web/ecx/support-content-notification/-/external/content/SecurityAdvisories/0/25659", "creation_timestamp": "2025-04-30T17:13:05.000000Z"}, {"uuid": "dacd89f5-7b20-465f-86d2-3d99bb9094f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3503", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/14239", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3503\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Maps  WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-01T06:00:04.224Z\n\ud83d\udccf Modified: 2025-05-01T06:00:04.224Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/83ddd432-309f-4ff5-974c-fdc9c67d1051/", "creation_timestamp": "2025-05-01T06:13:50.000000Z"}, {"uuid": "d8745b0d-8ef0-45ad-afba-6028b4a385a5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35996", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14473", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-35996\n\ud83d\udd25 CVSS Score: 9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. That filename is later transmitted to the client in order to show a list of configuration files. Due to a missing escape or sanitization, the filename could be executed as HTML script tag resulting in a cross-site-scripting attack.\n\ud83d\udccf Published: 2025-05-01T18:42:50.035Z\n\ud83d\udccf Modified: 2025-05-02T13:01:19.096Z\n\ud83d\udd17 References:\n1. https://www.cisa.gov/news-events/ics-advisories/icsa-25-121-01\n2. http://packages.revolutionpi.de/pool/main/p/pictory/", "creation_timestamp": "2025-05-02T13:15:43.000000Z"}, {"uuid": "23d23833-ae6f-4a56-8fd7-d570bef7f987", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3517", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14482", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3517\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Incorrect privilege assignment in PAM JIT elevation feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM user to elevate a previously configured user configured in a PAM JIT account via failure to update the internal account\u2019s SID when updating the username.\n\ud83d\udccf Published: 2025-05-01T18:26:22.565Z\n\ud83d\udccf Modified: 2025-05-02T12:21:00.974Z\n\ud83d\udd17 References:\n1. https://devolutions.net/security/advisories/DEVO-2025-0006/", "creation_timestamp": "2025-05-02T13:15:54.000000Z"}, {"uuid": "f50d4f7d-e5e0-4428-82a5-9990a0afc4a3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3521", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14245", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3521\n\ud83d\udd25 CVSS Score: 6.4 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Team Members \u2013 Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social Link icons in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page.\n\ud83d\udccf Published: 2025-05-01T06:40:16.242Z\n\ud83d\udccf Modified: 2025-05-01T06:40:16.242Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/93b83e65-09d6-4ad5-85f3-d18a9a35f39d?source=cve\n2. https://wordpress.org/plugins/wps-team/", "creation_timestamp": "2025-05-01T07:14:12.000000Z"}, {"uuid": "76bff851-38d4-4c65-84ec-ff3b72ec9224", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3547", "type": "seen", "source": "Telegram/1hyx-xddl553m6ux5CZUmwH84K_oxMVsKo_HZyTHKWq-JqE", "content": "", "creation_timestamp": "2026-01-08T15:03:39.000000Z"}, {"uuid": "c72fde60-9268-4a09-98a2-9de72575aebd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3504", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14238", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3504\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Maps  WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-01T06:00:04.597Z\n\ud83d\udccf Modified: 2025-05-01T06:00:04.597Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/252484a6-96f0-43f3-a7dc-d20cc89ba119/", "creation_timestamp": "2025-05-01T06:13:49.000000Z"}, {"uuid": "75ef5a98-e5b7-4573-8f28-4555e73f0bd1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3502", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14240", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3502\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The WP Maps  WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-01T06:00:04.009Z\n\ud83d\udccf Modified: 2025-05-01T06:00:04.009Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/dd436064-e611-4a4b-a873-67ed6029c46f/", "creation_timestamp": "2025-05-01T06:13:52.000000Z"}, {"uuid": "81845f77-0f60-4c26-b56a-317c9152db5d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35051", "type": "seen", "source": "Telegram/O07TgmjcRwlDKdEqQK7l4behNusvvNt-L2WaEGxPMBowbdo", "content": "", "creation_timestamp": "2026-01-09T19:04:43.000000Z"}, {"uuid": "c5e827c7-1fff-41b9-ae02-173e3f2fa13e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35050", "type": "seen", "source": "Telegram/O07TgmjcRwlDKdEqQK7l4behNusvvNt-L2WaEGxPMBowbdo", "content": "", "creation_timestamp": "2026-01-09T19:04:43.000000Z"}, {"uuid": "1a2ec298-4af9-41f5-8ce3-22162487d12f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35006", "type": "seen", "source": "Telegram/xKHI-T-LGOC-t9WKYC0AbjLWq9cXmjnrD0T6qJ2Xgzl-6UA", "content": "", "creation_timestamp": "2026-01-12T17:04:50.000000Z"}, {"uuid": "d65c95bb-04a6-485b-b9b8-d1329217ea2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35005", "type": "seen", "source": "Telegram/xKHI-T-LGOC-t9WKYC0AbjLWq9cXmjnrD0T6qJ2Xgzl-6UA", "content": "", "creation_timestamp": "2026-01-12T17:04:50.000000Z"}, {"uuid": "27b981dc-a656-4e06-b0a5-7caced21bca7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35004", "type": "seen", "source": "Telegram/xKHI-T-LGOC-t9WKYC0AbjLWq9cXmjnrD0T6qJ2Xgzl-6UA", "content": "", "creation_timestamp": "2026-01-12T17:04:50.000000Z"}, {"uuid": "37d4f5fc-ad7f-462d-af79-c02a46311b38", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35006", "type": "published-proof-of-concept", "source": "Telegram/V0wGkxBvu-m4A0gedtPbRsji0x8zhL8zp31yoPidKwD4ncM", "content": "", "creation_timestamp": "2026-01-12T17:05:07.000000Z"}, {"uuid": "ae8a47ff-36f8-4019-b0de-724774750edf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35007", "type": "published-proof-of-concept", "source": "Telegram/V0wGkxBvu-m4A0gedtPbRsji0x8zhL8zp31yoPidKwD4ncM", "content": "", "creation_timestamp": "2026-01-12T17:05:07.000000Z"}, {"uuid": "685ea693-f309-4ab0-92c0-43aa14fd9e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35010", "type": "published-proof-of-concept", "source": "Telegram/V0wGkxBvu-m4A0gedtPbRsji0x8zhL8zp31yoPidKwD4ncM", "content": "", "creation_timestamp": "2026-01-12T17:05:07.000000Z"}, {"uuid": "2614cf0a-5d1e-471a-9338-a2425e8cf6d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35008", "type": "published-proof-of-concept", "source": "Telegram/V0wGkxBvu-m4A0gedtPbRsji0x8zhL8zp31yoPidKwD4ncM", "content": "", "creation_timestamp": "2026-01-12T17:05:07.000000Z"}, {"uuid": "b4588752-4a44-4855-b043-66999da746dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35009", "type": "published-proof-of-concept", "source": "Telegram/V0wGkxBvu-m4A0gedtPbRsji0x8zhL8zp31yoPidKwD4ncM", "content": "", "creation_timestamp": "2026-01-12T17:05:07.000000Z"}, {"uuid": "d6d52024-ce53-442f-ae93-be51277bfbbd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35027", "type": "seen", "source": "Telegram/11xIB1xBiKHHk4vkf1TSD8teitNOWN5Pk1ybJV3ig8HDqzg", "content": "", "creation_timestamp": "2026-01-12T17:05:20.000000Z"}, {"uuid": "ec19550f-22b3-4f95-bb8b-4548b34fbd49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35010", "type": "seen", "source": "Telegram/11xIB1xBiKHHk4vkf1TSD8teitNOWN5Pk1ybJV3ig8HDqzg", "content": "", "creation_timestamp": "2026-01-12T17:05:20.000000Z"}, {"uuid": "b68a3b36-3a08-4b69-aa71-225dea26ebdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3553", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11582", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3553\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pe_delete of the file /admin.php?mod=brand&act=del. The manipulation of the argument brand_id[] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T06:00:15.892Z\n\ud83d\udccf Modified: 2025-04-14T06:00:15.892Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304594\n2. https://vuldb.com/?ctiid.304594\n3. https://vuldb.com/?submit.548265\n4. https://www.yuque.com/baimatangseng-iyusa/qwwm81/oz331okguefvaob4?singleDoc", "creation_timestamp": "2025-04-14T06:53:46.000000Z"}, {"uuid": "183c0001-071b-4b8a-afc9-3de5483065f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11388", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3512\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/U:Clear)\n\ud83d\udd39 Description: There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow.This issue affects Qt from 6.8.0 to 6.8.4. Versions up to 6.6.0 are known to be unaffected, and the fix is in 6.8.4 and later.\n\ud83d\udccf Published: 2025-04-11T07:39:48.298Z\n\ud83d\udccf Modified: 2025-04-11T07:39:48.298Z\n\ud83d\udd17 References:\n1. https://codereview.qt-project.org/c/qt/qtbase/+/635546", "creation_timestamp": "2025-04-11T07:49:50.000000Z"}, {"uuid": "63cab595-59cf-4d0e-b196-d5acc3e0b9dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3563", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11599", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3563\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue is the function Set of the file /index.php?m=attachment&f=index&_su=wuzhicms&v=set&submit=1 of the component Setting Handler. The manipulation of the argument Setting leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T11:00:12.175Z\n\ud83d\udccf Modified: 2025-04-14T11:00:12.175Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304604\n2. https://vuldb.com/?ctiid.304604\n3. https://vuldb.com/?submit.549270\n4. https://wiki.shikangsi.com/post/share/915aeba9-7d7c-4d7f-92e2-bbd5560de1a7", "creation_timestamp": "2025-04-14T11:53:35.000000Z"}, {"uuid": "2085dbe1-dc1a-4734-94c4-e6ed830d7a93", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3552", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11580", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3552\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Lingxing ERP 2. It has been classified as critical. This affects an unknown part of the file /Api/TinyMce/UploadAjax.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T05:31:04.699Z\n\ud83d\udccf Modified: 2025-04-14T05:31:04.699Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304593\n2. https://vuldb.com/?ctiid.304593\n3. https://vuldb.com/?submit.547881\n4. https://github.com/666lail/report/blob/main/tmp/fileUpload_3.md", "creation_timestamp": "2025-04-14T05:53:37.000000Z"}, {"uuid": "aeccae0d-98b7-4a87-bbff-801df6ef4afc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3590", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11707", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3590\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Adianti Framework up to 8.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.1 is able to address this issue. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-14T21:31:04.736Z\n\ud83d\udccf Modified: 2025-04-14T21:31:04.736Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304645\n2. https://vuldb.com/?ctiid.304645\n3. https://vuldb.com/?submit.550296\n4. https://gist.github.com/mcdruid/8412cfb55f443a1344ff41af0ce1b215", "creation_timestamp": "2025-04-14T21:54:20.000000Z"}, {"uuid": "c445ad90-27c5-419c-bfb0-5ac14aca89d9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3587", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11706", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3587\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T20:00:08.666Z\n\ud83d\udccf Modified: 2025-04-14T20:00:08.666Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304642\n2. https://vuldb.com/?ctiid.304642\n3. https://vuldb.com/?submit.550129\n4. https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/ZeroWdd-studentmanager-authority.md", "creation_timestamp": "2025-04-14T20:54:44.000000Z"}, {"uuid": "977e5809-9a01-46a9-bf11-847c17ad5ce4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3531", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11555", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3531\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in YouDianCMS 9.5.21. This affects an unknown part of the file /App/Tpl/Admin/Default/Log/index.html. The manipulation of the argument UserName/LogType leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-13T05:31:04.976Z\n\ud83d\udccf Modified: 2025-04-13T05:31:04.976Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304569\n2. https://vuldb.com/?ctiid.304569\n3. https://vuldb.com/?submit.543080\n4. https://github.com/zonesec0/findcve/issues/4\n5. https://github.com/zonesec0/findcve/issues/5", "creation_timestamp": "2025-04-13T05:52:49.000000Z"}, {"uuid": "559a5d71-64f8-4c86-a337-78fa4f12dae2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3536", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11559", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3536\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-13T11:31:06.083Z\n\ud83d\udccf Modified: 2025-04-13T11:31:06.083Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304574\n2. https://vuldb.com/?ctiid.304574\n3. https://vuldb.com/?submit.545810\n4. https://www.websecurityinsights.my.id/2025/03/tutorials-website-employee-management.html", "creation_timestamp": "2025-04-13T11:52:52.000000Z"}, {"uuid": "167352d5-3d78-4076-8d0a-e68be1323528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3540", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11567", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3540\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this vulnerability is the function FCGI_WizardProtoProcess of the file /api/wizard/getCapability of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-13T22:31:07.248Z\n\ud83d\udccf Modified: 2025-04-13T22:31:07.248Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304579\n2. https://vuldb.com/?ctiid.304579\n3. https://vuldb.com/?submit.524734\n4. https://gist.github.com/mono7s/882650a9a9b54bedc374caf8308efef2\n5. https://zhiliao.h3c.com/theme/details/229784\n6. https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/", "creation_timestamp": "2025-04-13T22:53:21.000000Z"}, {"uuid": "1744730c-890f-4d4d-89c0-42005727cb5b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3560", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11592", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3560\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /product. The manipulation of the argument product_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T09:31:07.230Z\n\ud83d\udccf Modified: 2025-04-14T09:31:07.230Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304601\n2. https://vuldb.com/?ctiid.304601\n3. https://vuldb.com/?submit.549261\n4. https://wiki.shikangsi.com/post/share/3cae2847-317e-47d6-8f2a-c6fbba301d8e", "creation_timestamp": "2025-04-14T09:53:05.000000Z"}, {"uuid": "6a57b669-0e16-44df-ba36-057c852b8447", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3533", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11558", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3533\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admin/Default/Channel/index.html.Attackers. The manipulation of the argument Parent leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-13T10:00:12.790Z\n\ud83d\udccf Modified: 2025-04-13T10:00:12.790Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304571\n2. https://vuldb.com/?ctiid.304571\n3. https://vuldb.com/?submit.543083\n4. https://github.com/zonesec0/findcve/issues/7", "creation_timestamp": "2025-04-13T10:52:32.000000Z"}, {"uuid": "1746a6ff-23f2-40b3-8829-368a6269735d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3532", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11556", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3532\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/index.html.Attackers. The manipulation of the argument OrderNumber leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-13T06:00:10.234Z\n\ud83d\udccf Modified: 2025-04-13T06:00:10.234Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304570\n2. https://vuldb.com/?ctiid.304570\n3. https://vuldb.com/?submit.543082\n4. https://github.com/zonesec0/findcve/issues/6", "creation_timestamp": "2025-04-13T06:52:28.000000Z"}, {"uuid": "dcdb7adc-9515-459b-a70d-06496019aa8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3571", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11641", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3571\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Fannuo Enterprise Content Management System \u51e1\u8bfa\u4f01\u4e1a\u7f51\u7ad9\u7ba1\u7406\u7cfb\u7edf 1.1/4.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/cms_chip.php. The manipulation of the argument del leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T15:00:10.698Z\n\ud83d\udccf Modified: 2025-04-14T15:32:38.355Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304612\n2. https://vuldb.com/?ctiid.304612\n3. https://vuldb.com/?submit.549927\n4. https://wiki.shikangsi.com/post/share/c46c50d3-c8d7-46a0-9fed-8d79a64abb44", "creation_timestamp": "2025-04-14T15:53:44.000000Z"}, {"uuid": "0daf9062-e92b-4339-aa50-84ce6a344ae8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3537", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11561", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3537\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-user.php. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-13T12:00:14.100Z\n\ud83d\udccf Modified: 2025-04-13T12:00:14.100Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304575\n2. https://vuldb.com/?ctiid.304575\n3. https://vuldb.com/?submit.545859\n4. https://www.websecurityinsights.my.id/2025/03/tutorials-website-employee-management_28.html", "creation_timestamp": "2025-04-13T12:53:00.000000Z"}, {"uuid": "566782cc-fc8e-4256-a7da-92541f908d10", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3535", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11560", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3535\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in shuanx BurpAPIFinder up to 2.0.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file BurpApiFinder.db. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-13T11:00:13.406Z\n\ud83d\udccf Modified: 2025-04-13T11:00:13.406Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304573\n2. https://vuldb.com/?ctiid.304573\n3. https://vuldb.com/?submit.545457\n4. https://github.com/shuanx/BurpAPIFinder/issues/18\n5. https://github.com/shuanx/BurpAPIFinder/issues/18#issue-2956026808", "creation_timestamp": "2025-04-13T11:52:53.000000Z"}, {"uuid": "c1b6435a-e280-432b-9a0f-fcbda857e99b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3570", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11627", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3570\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0. It has been classified as problematic. This affects the function Save of the file ContentController.java. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T14:31:04.600Z\n\ud83d\udccf Modified: 2025-04-14T14:36:24.850Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304611\n2. https://vuldb.com/?ctiid.304611\n3. https://vuldb.com/?submit.549923\n4. https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/db-hospital-drug-xss.md", "creation_timestamp": "2025-04-14T14:53:57.000000Z"}, {"uuid": "0fa6524e-fc49-46ae-843c-9e9be7d6fd25", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11564", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3538\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-13T18:31:05.124Z\n\ud83d\udccf Modified: 2025-04-13T18:31:05.124Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304577\n2. https://vuldb.com/?ctiid.304577\n3. https://vuldb.com/?submit.524224\n4. https://github.com/Fizz-L/CVE1/blob/main/DI-8100Command%20execution2.md\n5. https://www.dlink.com/", "creation_timestamp": "2025-04-13T18:52:02.000000Z"}, {"uuid": "427c2f92-49cf-480a-844b-362b8f72f91e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3544", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11572", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3544\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getCapabilityWeb of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-14T00:31:07.721Z\n\ud83d\udccf Modified: 2025-04-14T00:31:07.721Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304583\n2. https://vuldb.com/?ctiid.304583\n3. https://vuldb.com/?submit.524743\n4. https://gist.github.com/isstabber/05dfeefa3685a369b8802626e0252e27\n5. https://zhiliao.h3c.com/theme/details/229784\n6. https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/", "creation_timestamp": "2025-04-14T00:52:19.000000Z"}, {"uuid": "0519eaa8-c6be-442b-a602-addb1c797af2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3541", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11571", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3541\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this issue is the function FCGI_WizardProtoProcess of the file /api/wizard/getSpecs of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-13T23:00:14.702Z\n\ud83d\udccf Modified: 2025-04-13T23:00:14.702Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304580\n2. https://vuldb.com/?ctiid.304580\n3. https://vuldb.com/?submit.524737\n4. https://gist.github.com/mono7s/fcbc1f02d69547704cc9027b29e51c73\n5. https://zhiliao.h3c.com/theme/details/229784\n6. https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/", "creation_timestamp": "2025-04-13T23:52:51.000000Z"}, {"uuid": "a336ff93-2dbb-4fc3-953e-3799b44290bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3542", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11570", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3542\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in H3C Magic NX15, Magic NX400 and Magic R3010 up to V100R014. This affects the function FCGI_WizardProtoProcess of the file /api/wizard/getsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-13T23:31:06.617Z\n\ud83d\udccf Modified: 2025-04-13T23:31:06.617Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304581\n2. https://vuldb.com/?ctiid.304581\n3. https://vuldb.com/?submit.524738\n4. https://gist.github.com/mono7s/dd7a0a1ec444bb2c228590d298e37a5d\n5. https://zhiliao.h3c.com/theme/details/229784\n6. https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/", "creation_timestamp": "2025-04-13T23:52:50.000000Z"}, {"uuid": "862f6d39-5050-41f4-be51-2216aa545491", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3539", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11569", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3539\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getBasicInfo of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-13T22:00:13.331Z\n\ud83d\udccf Modified: 2025-04-13T22:00:13.331Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304578\n2. https://vuldb.com/?ctiid.304578\n3. https://vuldb.com/?submit.521814\n4. https://github.com/isstabber/my_VulnHub/blob/main/h3cNX15/nx15_command_injection.md\n5. https://zhiliao.h3c.com/theme/details/229784\n6. https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/", "creation_timestamp": "2025-04-13T22:53:23.000000Z"}, {"uuid": "a8457943-3930-4a05-b3cd-0e1ee1bf3c73", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3550", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11577", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3550\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in wowjoy \u6d59\u6c5f\u6e56\u5dde\u534e\u5353\u4fe1\u606f\u79d1\u6280\u6709\u9650\u516c\u53f8 Internet Doctor Workstation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /v1/pushConfig/detail/. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T03:31:04.899Z\n\ud83d\udccf Modified: 2025-04-14T03:31:04.899Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304591\n2. https://vuldb.com/?ctiid.304591\n3. https://vuldb.com/?submit.547789\n4. https://github.com/38279/2/issues/1", "creation_timestamp": "2025-04-14T03:53:19.000000Z"}, {"uuid": "e33ed9e6-fe0d-4a5c-9b04-767a2d0b3df0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3548", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11576", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3548\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue.\n\ud83d\udccf Published: 2025-04-14T02:31:05.592Z\n\ud83d\udccf Modified: 2025-04-14T02:31:05.592Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304589\n2. https://vuldb.com/?ctiid.304589\n3. https://vuldb.com/?submit.546413\n4. https://github.com/assimp/assimp/issues/6068\n5. https://github.com/user-attachments/files/19580584/aiString_Set-hbo.zip\n6. https://github.com/assimp/assimp/pull/6073", "creation_timestamp": "2025-04-14T02:53:07.000000Z"}, {"uuid": "6ad9a3e5-c6bf-4024-8e5e-4121ec0e111e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3545", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11575", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3545\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/setLanguage of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-14T01:00:09.263Z\n\ud83d\udccf Modified: 2025-04-14T01:00:09.263Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304584\n2. https://vuldb.com/?ctiid.304584\n3. https://vuldb.com/?submit.524744\n4. https://gist.github.com/isstabber/cc7bc3281c0f0d6659d2f9934e1c57c1\n5. https://zhiliao.h3c.com/theme/details/229784\n6. https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/", "creation_timestamp": "2025-04-14T01:52:18.000000Z"}, {"uuid": "72e57bbe-5f5f-40cd-b763-1865e721c5cc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3546", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11574", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3546\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getLanguage of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-14T01:31:07.222Z\n\ud83d\udccf Modified: 2025-04-14T01:31:07.222Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304585\n2. https://vuldb.com/?ctiid.304585\n3. https://vuldb.com/?submit.524745\n4. https://gist.github.com/isstabber/154661f329e4ae6bfe15dcdc0b932ff3\n5. https://zhiliao.h3c.com/theme/details/229784\n6. https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/", "creation_timestamp": "2025-04-14T01:52:17.000000Z"}, {"uuid": "90a74b13-2b02-4ec1-a7bb-a25644bce264", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3543", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11573", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3543\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014 and classified as critical. This vulnerability affects the function FCGI_WizardProtoProcess of the file /api/wizard/setsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component.\n\ud83d\udccf Published: 2025-04-14T00:00:12.283Z\n\ud83d\udccf Modified: 2025-04-14T00:00:12.283Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304582\n2. https://vuldb.com/?ctiid.304582\n3. https://vuldb.com/?submit.524739\n4. https://gist.github.com/mono7s/9369a3ef060b5655303cd234ba583bb5\n5. https://zhiliao.h3c.com/theme/details/229784\n6. https://www.h3c.com/cn/Service/Document_Software/Software_Download/Consume_product/", "creation_timestamp": "2025-04-14T00:52:20.000000Z"}, {"uuid": "be93943e-e219-40ca-8c60-acc660906119", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3554", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11581", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3554\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in phpshe 1.8. It has been rated as problematic. This issue affects some unknown processing of the file api.php?mod=cron&act=buyer. The manipulation of the argument act leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T06:31:07.015Z\n\ud83d\udccf Modified: 2025-04-14T06:31:07.015Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304595\n2. https://vuldb.com/?ctiid.304595\n3. https://vuldb.com/?submit.548411\n4. https://www.yuque.com/baimatangseng-iyusa/qwwm81/zwhcyq1585ec8g37?singleDoc", "creation_timestamp": "2025-04-14T06:53:45.000000Z"}, {"uuid": "d399bf52-b3c0-4dfb-a5f6-a5593666a8a2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3549", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11578", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3549\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T03:00:08.855Z\n\ud83d\udccf Modified: 2025-04-14T03:00:08.855Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304590\n2. https://vuldb.com/?ctiid.304590\n3. https://vuldb.com/?submit.546414\n4. https://github.com/assimp/assimp/issues/6070\n5. https://github.com/user-attachments/files/19580481/Assimp_MD3Importer_ValidateSurfaceHeaderOffsets-hbo.zip", "creation_timestamp": "2025-04-14T03:53:20.000000Z"}, {"uuid": "143dcf9a-4f14-459f-ac40-618882e9fbe9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3556", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11585", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3556\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T07:31:05.089Z\n\ud83d\udccf Modified: 2025-04-14T07:31:05.089Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304597\n2. https://vuldb.com/?ctiid.304597\n3. https://vuldb.com/?submit.549187\n4. https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30.html", "creation_timestamp": "2025-04-14T07:52:58.000000Z"}, {"uuid": "86eb43c3-f80f-4bbb-8b31-26fd6cdea2ec", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3551", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11579", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3551\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Lingxing ERP 2 and classified as critical. Affected by this issue is the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T04:31:04.486Z\n\ud83d\udccf Modified: 2025-04-14T04:31:04.486Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304592\n2. https://vuldb.com/?ctiid.304592\n3. https://vuldb.com/?submit.547878\n4. https://github.com/666lail/report/blob/main/tmp/fileUpload_1.md", "creation_timestamp": "2025-04-14T04:52:43.000000Z"}, {"uuid": "d00b0135-6017-4131-ad06-46e148de9883", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3558", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11587", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3558\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in ghostxbh uzy-ssm-mall 1.0.0. This affects an unknown part of the file /mall/user/uploadUserHeadImage. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T08:31:06.643Z\n\ud83d\udccf Modified: 2025-04-14T08:31:06.643Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304599\n2. https://vuldb.com/?ctiid.304599\n3. https://vuldb.com/?submit.549259\n4. https://wiki.shikangsi.com/post/share/2f5fafb5-63d3-4784-8866-5592547a71a4", "creation_timestamp": "2025-04-14T08:55:48.000000Z"}, {"uuid": "92b904b1-5ec2-4b05-93c0-d3f5197ed160", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3557", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11590", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3557\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T08:00:12.085Z\n\ud83d\udccf Modified: 2025-04-14T08:00:12.085Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304598\n2. https://vuldb.com/?ctiid.304598\n3. https://vuldb.com/?submit.551053\n4. https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_3.html\n5. https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30_79.html", "creation_timestamp": "2025-04-14T08:55:50.000000Z"}, {"uuid": "9c53af24-97a9-40cd-804f-0218d0b897d7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3564", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11596", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3564\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T11:31:05.131Z\n\ud83d\udccf Modified: 2025-04-14T11:31:05.131Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304605\n2. https://vuldb.com/?ctiid.304605\n3. https://vuldb.com/?submit.549309\n4. https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/StudentManager-authority.md", "creation_timestamp": "2025-04-14T11:53:33.000000Z"}, {"uuid": "a7902143-2cd3-430b-96cf-8787f5a4173a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3561", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11595", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3561\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T10:00:10.633Z\n\ud83d\udccf Modified: 2025-04-14T10:00:10.633Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304602\n2. https://vuldb.com/?ctiid.304602\n3. https://vuldb.com/?submit.549268\n4. https://wiki.shikangsi.com/post/share/4ccab5f6-4f54-4bac-b0fc-a436884432ff", "creation_timestamp": "2025-04-14T10:53:00.000000Z"}, {"uuid": "d880d6db-df6d-44a7-9b5a-5dab1907b580", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3562", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11594", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3562\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in Yonyou YonBIP MA2.7. It has been declared as problematic. Affected by this vulnerability is the function FileInputStream of the file /mobsm/common/userfile. The manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T10:31:06.480Z\n\ud83d\udccf Modified: 2025-04-14T10:31:06.480Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304603\n2. https://vuldb.com/?ctiid.304603\n3. https://vuldb.com/?submit.549269\n4. https://wiki.shikangsi.com/post/share/7329f367-dd6e-48fb-b585-e10fbfc63bb2", "creation_timestamp": "2025-04-14T10:53:00.000000Z"}, {"uuid": "3a292a06-7a01-47ac-9172-b51b806c8cf3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3559", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11593", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3559\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in ghostxbh uzy-ssm-mall 1.0.0 and classified as critical. This vulnerability affects the function ForeProductListController of the file /mall/product/0/20. The manipulation of the argument orderBy leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T09:00:17.244Z\n\ud83d\udccf Modified: 2025-04-14T09:00:17.244Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304600\n2. https://vuldb.com/?ctiid.304600\n3. https://vuldb.com/?submit.549260\n4. https://wiki.shikangsi.com/post/share/ba8925f0-0480-4356-9b32-4543d0ea8671", "creation_timestamp": "2025-04-14T09:53:07.000000Z"}, {"uuid": "d44faf5d-b8bb-4703-8c72-a6ea5511880a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3566", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11601", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3566\n\ud83d\udd25 CVSS Score: 6.9 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, has been found in veal98 \u5c0f\u725b\u8089 Echo \u5f00\u6e90\u793e\u533a\u7cfb\u7edf 4.2. This issue affects the function uploadMdPic of the file /discuss/uploadMdPic. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T12:31:04.765Z\n\ud83d\udccf Modified: 2025-04-14T12:31:04.765Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304607\n2. https://vuldb.com/?ctiid.304607\n3. https://vuldb.com/?submit.549509\n4. https://github.com/caigo8/CVE-md/blob/main/Echo/%E6%9C%AA%E6%8E%88%E6%9D%83%E4%BB%BB%E6%84%8F%E6%96%87%E4%BB%B6%E4%B8%8A%E4%BC%A0.md", "creation_timestamp": "2025-04-14T12:54:18.000000Z"}, {"uuid": "f199f5bf-3917-488d-af4e-3518f35e2a34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11613", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3568\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability has been found in Webkul Krayin CRM up to 2.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/settings/users/edit/ of the component SVG File Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor prepares a fix for the next major release and explains that he does not think therefore that this should qualify for a CVE.\n\ud83d\udccf Published: 2025-04-14T13:31:04.358Z\n\ud83d\udccf Modified: 2025-04-14T13:31:04.358Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304609\n2. https://vuldb.com/?ctiid.304609\n3. https://vuldb.com/?submit.549591\n4. https://gist.github.com/shellkraft/a8b1f35d5c3ba313605065889563fb00\n5. https://drive.google.com/file/d/1LMzZyCgloWquJRWzJAV2bpWMTuiMs6Xa/view?usp=sharing", "creation_timestamp": "2025-04-14T13:54:58.000000Z"}, {"uuid": "2f1a7e9f-4085-448a-a79b-9ff4dff0b49c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3588", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11704", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3588\n\ud83d\udd25 CVSS Score: 4.8 (cvssV4_0, Vector: CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T20:31:04.933Z\n\ud83d\udccf Modified: 2025-04-14T20:31:04.933Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304643\n2. https://vuldb.com/?ctiid.304643\n3. https://vuldb.com/?submit.550136\n4. https://github.com/joelittlejohn/jsonschema2pojo/issues/1672\n5. https://github.com/joelittlejohn/jsonschema2pojo/issues/1672#issue-2968446816", "creation_timestamp": "2025-04-14T20:54:39.000000Z"}, {"uuid": "c946deb8-8b36-4041-88b4-62a55191b9cf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3567", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11615", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3567\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as problematic, was found in veal98 \u5c0f\u725b\u8089 Echo \u5f00\u6e90\u793e\u533a\u7cfb\u7edf 4.2. Affected is the function preHandle of the file src/main/java/com/greate/community/controller/interceptor/LoginTicketInterceptor.java of the component Ticket Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T13:00:06.776Z\n\ud83d\udccf Modified: 2025-04-14T13:30:31.722Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304608\n2. https://vuldb.com/?ctiid.304608\n3. https://vuldb.com/?submit.549537\n4. https://github.com/caigo8/CVE-md/blob/main/Echo/%E4%B8%8D%E5%AE%89%E5%85%A8%E7%9A%84%E6%9D%83%E9%99%90%E6%A0%A1%E9%AA%8C.md", "creation_timestamp": "2025-04-14T13:55:00.000000Z"}, {"uuid": "83045883-95b4-4923-b89c-502fbde0dc20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3593", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11754", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3593\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T22:31:04.528Z\n\ud83d\udccf Modified: 2025-04-15T03:07:55.446Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304648\n2. https://vuldb.com/?ctiid.304648\n3. https://vuldb.com/?submit.550912\n4. https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-fileUpload.md", "creation_timestamp": "2025-04-15T03:54:35.000000Z"}, {"uuid": "598018d2-d657-42da-9bd8-e7b40b94ff4a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3547", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11637", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3547\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2. This vulnerability affects unknown code of the file /get_work_dir_files. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T02:00:09.568Z\n\ud83d\udccf Modified: 2025-04-14T15:37:27.259Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304588\n2. https://vuldb.com/?ctiid.304588\n3. https://vuldb.com/?submit.546220", "creation_timestamp": "2025-04-14T15:53:38.000000Z"}, {"uuid": "e3a78c2f-dd3d-4a8a-beee-7d9a31f2533a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3575", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11779", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3575\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via \"idUsuario\" parameter in \"/helper/Familia/establecerUsuarioSeleccion\" endpoint.\n\ud83d\udccf Published: 2025-04-15T08:54:18.456Z\n\ud83d\udccf Modified: 2025-04-15T08:54:33.470Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/insecure-direct-object-reference-deporsite-t-innova", "creation_timestamp": "2025-04-15T09:55:19.000000Z"}, {"uuid": "e7351217-3885-48d5-9551-032bbb45c077", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3591", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11752", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3591\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/v1/blog/edit. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T22:00:09.469Z\n\ud83d\udccf Modified: 2025-04-15T03:10:56.015Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304646\n2. https://vuldb.com/?ctiid.304646\n3. https://vuldb.com/?submit.550909\n4. https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-xss-1.md", "creation_timestamp": "2025-04-15T03:54:33.000000Z"}, {"uuid": "8b60ac9d-ae8d-48e1-afeb-cb881ae23f65", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3589", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11710", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3589\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manage_class.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-14T21:00:07.701Z\n\ud83d\udccf Modified: 2025-04-14T21:14:34.968Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304644\n2. https://vuldb.com/?ctiid.304644\n3. https://vuldb.com/?submit.550267\n4. https://github.com/byxs0x0/SQL/blob/main/SQL6.md\n5. https://www.sourcecodester.com/", "creation_timestamp": "2025-04-14T21:54:23.000000Z"}, {"uuid": "c3f60c24-2b40-4bc8-ac26-ee244e7d4bdd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3592", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11753", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3592\n\ud83d\udd25 CVSS Score: 5.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/v1/link/edit. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T22:00:11.419Z\n\ud83d\udccf Modified: 2025-04-15T03:09:51.714Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304647\n2. https://vuldb.com/?ctiid.304647\n3. https://vuldb.com/?submit.550910\n4. https://github.com/buluorifu/Vulnerability-recurrence/blob/main/Refer/My-Blog-layui-xss-2.md", "creation_timestamp": "2025-04-15T03:54:34.000000Z"}, {"uuid": "b80b632b-1882-4552-91c8-0106b0f133f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3555", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12016", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3555\n\ud83d\udd25 CVSS Score: 6.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-14T07:00:11.153Z\n\ud83d\udccf Modified: 2025-04-16T11:20:45.429Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304596\n2. https://vuldb.com/?ctiid.304596\n3. https://vuldb.com/?submit.549168\n4. https://www.websecurityinsights.my.id/2025/04/script-and-tools-ecommerce-30-loginphp.html\n5. https://github.com/Maloyroyorko/E-commerce-3.0-user-bruter", "creation_timestamp": "2025-04-16T11:56:55.000000Z"}, {"uuid": "27a9f047-106d-48dd-8f1d-b265024deb08", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3573", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11771", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3573\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:L/SI:L/SA:N)\n\ud83d\udd39 Description: Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary.\n\ud83d\udccf Published: 2025-04-15T05:00:09.474Z\n\ud83d\udccf Modified: 2025-04-15T05:00:09.474Z\n\ud83d\udd17 References:\n1. https://security.snyk.io/vuln/SNYK-JS-JQUERYVALIDATION-5952285\n2. https://github.com/jquery-validation/jquery-validation/pull/2462\n3. https://github.com/jquery-validation/jquery-validation/commit/7a490d8f39bd988027568ddcf51755e1f4688902", "creation_timestamp": "2025-04-15T05:54:46.000000Z"}, {"uuid": "8dde5a97-607c-4ebe-9d06-50f0e63ddddd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3574", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11775", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3574\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via \"idUsuario\" parameter in \"/helper/Familia/obtenerFamiliaUsuario\" endpoint.\n\ud83d\udccf Published: 2025-04-15T08:47:46.168Z\n\ud83d\udccf Modified: 2025-04-15T08:47:46.168Z\n\ud83d\udd17 References:\n1. https://www.incibe.es/en/incibe-cert/notices/aviso/insecure-direct-object-reference-deporsite-t-innova", "creation_timestamp": "2025-04-15T08:55:07.000000Z"}, {"uuid": "e170fed8-c245-4f0a-b082-f271ef680fdf", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3576", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/11774", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3576\n\ud83d\udd25 CVSS Score: 5.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N)\n\ud83d\udd39 Description: A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.\n\ud83d\udccf Published: 2025-04-15T05:55:26.732Z\n\ud83d\udccf Modified: 2025-04-15T05:55:26.732Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-3576\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2359465", "creation_timestamp": "2025-04-15T06:54:49.000000Z"}, {"uuid": "d133bba3-8bf6-4115-ac9b-bfa52717c41e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3598", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12391", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3598\n\ud83d\udd25 CVSS Score: 6.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N)\n\ud83d\udd39 Description: The Coupon Affiliates \u2013 Affiliate Plugin for WooCommerce plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the commission_summary parameter in all versions up to, and including, .6.3.0 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.\n\ud83d\udccf Published: 2025-04-18T05:22:59.653Z\n\ud83d\udccf Modified: 2025-04-18T05:22:59.653Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/2d6cf33c-ac40-4892-9345-64ebe61e6be6?source=cve\n2. https://plugins.trac.wordpress.org/browser/woo-coupon-usage/tags/6.2.2/inc/functions/functions-all-time.php#L245", "creation_timestamp": "2025-04-18T05:58:44.000000Z"}, {"uuid": "f4cb3783-8cf1-45d0-a613-1ba42a87cdfa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12374", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3509\n\ud83d\udd25 CVSS Score: 7.1 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:H/UI:N/VC:L/VI:H/VA:L/SC:L/SI:H/SA:L/AU:N/R:U/V:C/RE:M/U:Amber)\n\ud83d\udd39 Description: A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically allocated ports that become temporarily available, such as during a hot patch upgrade. This means the vulnerability is only exploitable during specific operational conditions, which limits the attack window. Exploitation required either site administrator permissions to enable and configure pre-receive hooks or a user with permissions to modify repositories containing pre-receive hooks where this functionality was already enabled. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.17 and was fixed in versions 3.16.2, 3.15.6, 3.14.11, 3.13.14. This vulnerability was reported via the GitHub Bug Bounty program.\n\ud83d\udccf Published: 2025-04-17T22:50:18.437Z\n\ud83d\udccf Modified: 2025-04-17T22:50:18.437Z\n\ud83d\udd17 References:\n1. https://docs.github.com/en/enterprise-server@3.13/admin/release-notes#3.13.14\n2. https://docs.github.com/en/enterprise-server@3.14/admin/release-notes#3.14.11\n3. https://docs.github.com/en/enterprise-server@3.15/admin/release-notes#3.15.6\n4. https://docs.github.com/en/enterprise-server@3.16/admin/release-notes#3.16.2", "creation_timestamp": "2025-04-17T22:58:30.000000Z"}, {"uuid": "58a012b8-78a9-4e5a-8b0c-66bea9b8e5fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3520", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12379", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3520\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: The Avatar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 0.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php).\n\ud83d\udccf Published: 2025-04-18T01:44:09.879Z\n\ud83d\udccf Modified: 2025-04-18T01:44:09.879Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/01769760-5bfe-4352-bc5b-141f078c0b6d?source=cve\n2. https://plugins.trac.wordpress.org/browser/avatar/trunk/avatar.php#L417\n3. https://wordpress.org/plugins/avatar/", "creation_timestamp": "2025-04-18T01:58:03.000000Z"}, {"uuid": "9889a054-d30c-4da4-acb0-38d758f07cb0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3577", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/12788", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3577\n\ud83d\udd25 CVSS Score: 4.9 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: **UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel\u00a0AMG1302-T10B firmware version\u00a02.00(AAJC.16)C0 could allow an authenticated attacker with\u00a0administrator privileges to\u00a0access restricted directories by sending a crafted HTTP request to an affected device.\n\ud83d\udccf Published: 2025-04-22T02:18:58.222Z\n\ud83d\udccf Modified: 2025-04-22T02:18:58.222Z\n\ud83d\udd17 References:\n1. https://www.zyxel.com/service-provider/global/en/security-advisories/end-of-life\n2. https://github.com/Jiangxiazhe/IOT_Vulnerability/blob/main/README.md", "creation_timestamp": "2025-04-22T03:02:50.000000Z"}, {"uuid": "df2f31a9-c012-470c-ad72-7fd51fe559c0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3518", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12813", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3518\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:L/SA:N)\n\ud83d\udd39 Description: It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled.\n\nThe file upload functionality can be enabled or disabled for specific use cases through configuration. In case the functionality is disabled for at least one use case, the system nevertheless allows files to be uploaded through direct API requests. During the upload file, interception and allowed file type rules are still applied correctly.\n\nIf file sharing is generally enabled, this issue is not of concern.\n\ud83d\udccf Published: 2025-04-22T08:49:56.073Z\n\ud83d\udccf Modified: 2025-04-22T08:51:07.759Z\n\ud83d\udd17 References:\n1. https://www.unblu.com/en/docs/latest/security-bulletins/#UBL-2025-002", "creation_timestamp": "2025-04-22T09:04:15.000000Z"}, {"uuid": "1a7e3b5f-3e2d-4c3e-8dc4-b53b54ac0c74", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/12812", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3519\n\ud83d\udd25 CVSS Score: 7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:H/AT:P/PR:L/UI:N/VC:N/VI:H/VA:N/SC:N/SI:H/SA:N)\n\ud83d\udd39 Description: An authorization bypass\u00a0in\u00a0Unblu Spark allows a\u00a0participant of a conversation\u00a0to replace an existing, uploaded file.\n\nEvery uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID (UUID). In case a participant of this or another conversation gets access to such a file ID, it can be used to replace the file without changing the file name and details or the name of the user who uploaded the file. During the upload, file interception and allowed file type rules are still applied correctly.\n\ud83d\udccf Published: 2025-04-22T08:51:41.681Z\n\ud83d\udccf Modified: 2025-04-22T08:51:41.681Z\n\ud83d\udd17 References:\n1. https://www.unblu.com/en/docs/latest/security-bulletins/#UBL-2025-001", "creation_timestamp": "2025-04-22T09:04:15.000000Z"}, {"uuid": "8513f0aa-3375-4745-9def-e93fea43b877", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3583", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/14838", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3583\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Newsletter  WordPress plugin before 8.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup).\n\ud83d\udccf Published: 2025-05-05T06:00:03.098Z\n\ud83d\udccf Modified: 2025-05-05T06:00:03.098Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/a6582e14-e21e-48e7-9b4c-0044fb199825/", "creation_timestamp": "2025-05-05T06:18:39.000000Z"}, {"uuid": "c2207f53-06bd-41b5-ab6f-808a62a7c199", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35995", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15444", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-35995\n\ud83d\udd25 CVSS Score: 7.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)\n\ud83d\udd39 Description: When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat\u00a0command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated.\n\ud83d\udccf Published: 2025-05-07T22:04:10.575Z\n\ud83d\udccf Modified: 2025-05-07T22:04:10.575Z\n\ud83d\udd17 References:\n1. https://my.f5.com/manage/s/article/K000149952", "creation_timestamp": "2025-05-07T22:23:01.000000Z"}, {"uuid": "e584e485-98ad-481d-9012-fbfeaaaf9dc3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/15462", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-35939\n\ud83d\udd25 CVSS Score: 5.3 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N)\n\ud83d\udd39 Description: Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at `/var/lib/php/sessions`. Such session files are named `sess_[session_value]`, where `[session_value]` is provided to the client in a `Set-Cookie` response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue.\n\ud83d\udccf Published: 2025-05-07T22:41:29.728Z\n\ud83d\udccf Modified: 2025-05-07T22:41:29.728Z\n\ud83d\udd17 References:\n1. https://github.com/craftcms/cms/pull/17220\n2. https://github.com/craftcms/cms/releases/tag/4.15.3\n3. https://github.com/craftcms/cms/releases/tag/5.7.5", "creation_timestamp": "2025-05-07T23:23:32.000000Z"}, {"uuid": "0cf3f750-a8de-49e7-8a61-f307dfd1de2d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3528", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/15715", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3528\n\ud83d\udd25 CVSS Score: 8.2 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H)\n\ud83d\udd39 Description: A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.\n\ud83d\udccf Published: 2025-05-09T11:58:24.957Z\n\ud83d\udccf Modified: 2025-05-09T11:58:24.957Z\n\ud83d\udd17 References:\n1. https://access.redhat.com/security/cve/CVE-2025-3528\n2. https://bugzilla.redhat.com/show_bug.cgi?id=2359143", "creation_timestamp": "2025-05-09T12:26:49.000000Z"}, {"uuid": "89566f07-4a02-4d22-b0c5-76886b827783", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35471", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/16075", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-35471\n\ud83d\udd25 CVSS Score: 7.3 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected.\n\ud83d\udccf Published: 2025-05-13T01:13:14.639Z\n\ud83d\udccf Modified: 2025-05-13T01:13:14.639Z\n\ud83d\udd17 References:\n1. https://github.com/conda-forge/openssl-feedstock/commit/066e83c5226bafe90a9c0575b077ce30cd5f5921\n2. https://github.com/conda-forge/openssl-feedstock/issues/201", "creation_timestamp": "2025-05-13T02:29:16.000000Z"}, {"uuid": "939afb66-ab2f-4e84-b5da-720c6aba8087", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3516", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/16638", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3516\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: The Simple Lightbox WordPress plugin before 2.9.4 does not validate and escape some of its attributes before outputting them back in a page/post, which could allow users with the contributor role and above to perform Stored Cross-Site Scripting attacks.\n\ud83d\udccf Published: 2025-05-16T06:00:04.784Z\n\ud83d\udccf Modified: 2025-05-16T06:00:04.784Z\n\ud83d\udd17 References:\n1. https://wpscan.com/vulnerability/336a78cd-297b-4f47-a007-e33eac7f1dad/", "creation_timestamp": "2025-05-16T06:35:21.000000Z"}, {"uuid": "0fa1901d-3f51-48f3-9b02-dc48a1b99168", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3580", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17393", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3580\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:L/A:H)\n\ud83d\udd39 Description: An access control vulnerability was discovered in Grafana OSS where an Organization administrator could permanently delete the Server administrator account. This vulnerability exists in the DELETE /api/org/users/ endpoint.\n\nThe vulnerability can be exploited when:\n\n1. An Organization administrator exists\n\n2. The Server administrator is either:\n\n   - Not part of any organization, or\n   - Part of the same organization as the Organization administrator\nImpact:\n\n- Organization administrators can permanently delete Server administrator accounts\n\n- If the only Server administrator is deleted, the Grafana instance becomes unmanageable\n\n- No super-user permissions remain in the system\n\n- Affects all users, organizations, and teams managed in the instance\n\nThe vulnerability is particularly serious as it can lead to a complete loss of administrative control over the Grafana instance.\n\ud83d\udccf Published: 2025-05-23T13:44:45.974Z\n\ud83d\udccf Modified: 2025-05-23T14:05:09.480Z\n\ud83d\udd17 References:\n1. https://grafana.com/security/security-advisories/cve-2025-3580/", "creation_timestamp": "2025-05-23T14:46:55.000000Z"}, {"uuid": "ee2d064f-fba7-40b6-82b0-542a06810f83", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35003", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/17548", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-35003\n\ud83d\udd25 CVSS Score: N/A\n\ud83d\udd39 Description: Improper Restriction of Operations within the Bounds of a Memory Buffer and Stack-based Buffer Overflow vulnerabilities were discovered in Apache NuttX RTOS Bluetooth Stack (HCI and UART components) that may result in system crash, denial of service, or arbitrary code execution, after receiving maliciously crafted packets.\n\nNuttX's Bluetooth HCI/UART stack users are advised to upgrade to version 12.9.0, which fixes the identified implementation issues.\n\nThis issue affects Apache NuttX: from 7.25 before 12.9.0.\n\ud83d\udccf Published: 2025-05-26T10:03:06.808Z\n\ud83d\udccf Modified: 2025-05-26T10:03:06.808Z\n\ud83d\udd17 References:\n1. https://github.com/apache/nuttx/pull/16179\n2. https://lists.apache.org/thread/k4xzz3jhkx48zxw9vwmqrmm4hmg78vsj", "creation_timestamp": "2025-05-26T10:47:18.000000Z"}, {"uuid": "de2a9d8b-0dfd-48a9-ac3d-1dd4d97a2f5f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35940", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/17999", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-35940\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The ArchiverSpaApi\u00a0ASP.NET  application uses a hard-coded JWT signing key. An unauthenticated remote attacker can generate and use a verifiable JWT token to access protected ArchiverSpaApi URL endpoints.\n\ud83d\udccf Published: 2025-06-10T20:27:51.562Z\n\ud83d\udccf Modified: 2025-06-10T20:27:51.562Z\n\ud83d\udd17 References:\n1. https://www.tenable.com/security/research/tra-2025-17", "creation_timestamp": "2025-06-10T21:32:09.000000Z"}, {"uuid": "dba82777-b236-46cc-8ff0-aa5e743be52f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35941", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18067", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-35941\n\ud83d\udd25 CVSS Score: 5.5 (cvssV3_1, Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N)\n\ud83d\udd39 Description: A password is exposed locally.\n\ud83d\udccf Published: 2025-06-11T13:15:50.588Z\n\ud83d\udccf Modified: 2025-06-11T13:15:50.588Z\n\ud83d\udd17 References:\n1. https://www.tenable.com/security/research/tra-2025-18", "creation_timestamp": "2025-06-11T13:30:54.000000Z"}, {"uuid": "f84747f0-889f-4976-b85e-a1fbb5571b8d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35978", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18151", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-35978\n\ud83d\udd25 CVSS Score: 7.1 (cvssV3_0, Vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H)\n\ud83d\udd39 Description: Improper restriction of communication channel to intended endpoints issue exists in UpdateNavi V1.4 L10 to L33 and UpdateNaviInstallService Service 1.2.0091 to 1.2.0125. If a local authenticated attacker send malicious data, an arbitrary registry value may be modified or arbitrary code may be executed.\n\ud83d\udccf Published: 2025-06-12T06:05:00.260Z\n\ud83d\udccf Modified: 2025-06-12T06:05:00.260Z\n\ud83d\udd17 References:\n1. https://azby.fmworld.net/support/security/information/updatenavi202506/\n2. https://jvn.jp/en/jp/JVN17860456/", "creation_timestamp": "2025-06-12T06:35:09.000000Z"}, {"uuid": "a1b71079-09e3-48d1-bd70-960021528681", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3526", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18452", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3526\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: SessionClicks in Liferay Portal 7.0.0 through 7.4.3.21, and Liferay DXP 7.4 GA through update 9, 7.3 GA through update 25, and older unsupported versions does not restrict the saving of request parameters in the HTTP session, which allows remote attackers to consume system memory leading to denial-of-service (DoS) conditions via crafted HTTP requests.\n\ud83d\udccf Published: 2025-06-16T14:18:34.913Z\n\ud83d\udccf Modified: 2025-06-16T14:18:34.913Z\n\ud83d\udd17 References:\n1. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-3526", "creation_timestamp": "2025-06-16T14:38:04.000000Z"}, {"uuid": "9ddc7e4c-0b23-4915-87be-efd7f6c6cdab", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/18573", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3515\n\ud83d\udd25 CVSS Score: 8.1 (cvssV3_1, Vector: CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H)\n\ud83d\udd39 Description: The Drag and Drop Multiple File Upload for Contact Form 7 plugin for WordPress is vulnerable to arbitrary file uploads due to insufficient file type validation in all versions up to, and including, 1.3.8.9. This makes it possible for unauthenticated attackers to bypass the plugin's blacklist and upload .phar or other dangerous file types on the affected site's server, which may make remote code execution possible on the servers that are configured to handle .phar files as executable PHP scripts, particularly in default Apache+mod_php configurations where the file extension is not strictly validated before being passed to the PHP interpreter.\n\ud83d\udccf Published: 2025-06-17T09:21:39.083Z\n\ud83d\udccf Modified: 2025-06-17T09:21:39.083Z\n\ud83d\udd17 References:\n1. https://www.wordfence.com/threat-intel/vulnerabilities/id/e1298242-61d2-495e-bae7-96b5e12bd03d?source=cve\n2. https://plugins.trac.wordpress.org/browser/drag-and-drop-multiple-file-upload-contact-form-7/tags/1.3.8.8/inc/dnd-upload-cf7.php#L845\n3. https://plugins.trac.wordpress.org/changeset/3310153/", "creation_timestamp": "2025-06-17T09:41:29.000000Z"}, {"uuid": "316d7504-195c-4593-9afb-d7f150446169", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3594", "type": "seen", "source": "https://t.me/DarkWebInformer_CVEAlerts/18454", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3594\n\ud83d\udd25 CVSS Score: 8.6 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: Path traversal vulnerability with the downloading and installation of Xuggler in Liferay Portal 7.0.0 through 7.4.3.4, and Liferay DXP 7.4 GA, 7.3 GA through update 34, and older unsupported versions allows remote attackers to (1) add files to arbitrary locations on the server and (2) download and execute arbitrary files from the download server via the `_com_liferay_server_admin_web_portlet_ServerAdminPortlet_jarName` parameter.\n\ud83d\udccf Published: 2025-06-16T14:13:54.426Z\n\ud83d\udccf Modified: 2025-06-16T14:13:54.426Z\n\ud83d\udd17 References:\n1. https://liferay.dev/portal/security/known-vulnerabilities/-/asset_publisher/jekt/content/CVE-2025-3594", "creation_timestamp": "2025-06-16T14:38:09.000000Z"}, {"uuid": "be595d28-0b08-459b-8561-438db747f164", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3534", "type": "published-proof-of-concept", "source": "https://t.me/DarkWebInformer_CVEAlerts/11557", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3534\n\ud83d\udd25 CVSS Score: 5.3 (cvssV4_0, Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability, which was classified as critical, was found in PowerCreator CMS 1.0. Affected is an unknown function of the file /OpenPublicCourse.aspx. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.\n\ud83d\udccf Published: 2025-04-13T10:31:04.734Z\n\ud83d\udccf Modified: 2025-04-13T10:31:04.734Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304572\n2. https://vuldb.com/?ctiid.304572\n3. https://vuldb.com/?submit.543120\n4. https://github.com/yztale/powercreator/blob/main/README.md", "creation_timestamp": "2025-04-13T10:52:31.000000Z"}, {"uuid": "d5dd6f3d-f6be-41db-a577-7886fc59b19f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50100", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aCVE-2025-3515 WordPress lab for Drag and Drop Multiple File Upload for CF7: Dockerized PoC & Nuclei testing\nURL\uff1ahttps://github.com/Maitonnx/Anydesk-Exploit-CVE-2025-12654-RCE-Builder\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-03T10:13:07.000000Z"}, {"uuid": "f5a09484-f4ee-4619-ae60-38e16b3db1f0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/49885", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1aWordPress File Upload RCE Exploit\nURL\uff1ahttps://github.com/blueisbeautiful/CVE-2025-3515\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-01T15:53:55.000000Z"}, {"uuid": "897c8d9d-e562-4233-b314-a183beb0b736", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/53558", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.\nURL\uff1ahttps://github.com/maestro-ant/Vvveb-CMS-CVE-2025-8518\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-29T16:59:29.000000Z"}, {"uuid": "9efcd090-be1b-4e7c-9b8f-160a849283be", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/53219", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.\nURL\uff1ahttps://github.com/robertskimengote/lab-cve-2025-3515\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-09-26T22:25:44.000000Z"}, {"uuid": "3ceec3ba-ece3-46e6-ab9d-c75b165804fd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50097", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1aCVE-2025-3515 WordPress lab for Drag and Drop Multiple File Upload for CF7: Dockerized PoC & Nuclei testing\nURL\uff1ahttps://github.com/ImBIOS/lab-cve-2025-3515\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-09-03T09:44:01.000000Z"}, {"uuid": "049e1352-4e71-40a4-bee4-5aada51b8c8e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/50284", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 in a Dockerized WordPress lab to test unrestricted file uploads via the Contact Form 7 plugin.\nURL\uff1ahttps://github.com/MrSoules/lab-cve-2025-3515\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-09-04T20:55:08.000000Z"}, {"uuid": "2feac4eb-ecc7-48f3-9997-5fd04726484d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/54025", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aCVE-2025\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.\nURL\uff1ahttps://github.com/fa1consec/cve_2025_61622_poc\n\n\u6807\u7b7e\uff1a#CVE-2025", "creation_timestamp": "2025-10-03T12:45:53.000000Z"}, {"uuid": "581eca77-da33-4465-af0a-42d786d0872a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/GithubRedTeam/54180", "content": "GitHub\u76d1\u63a7\u6d88\u606f\u63d0\u9192\uff01\uff01\uff01 \n\n\u66f4\u65b0\u4e86\uff1aRCE\n\u63cf\u8ff0\uff1a\ud83d\udee0\ufe0f Reproduce and validate CVE-2025-3515 by setting up a Dockerized WordPress lab for testing unrestricted file uploads in a vulnerable plugin.\nURL\uff1ahttps://github.com/ivy2320/CTF-event\n\n\u6807\u7b7e\uff1a#RCE", "creation_timestamp": "2025-10-04T19:09:55.000000Z"}, {"uuid": "bee0aa14-5e07-4539-95c7-1a6a53629b4c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/zero_day_uz/503", "content": "CVE-2025-3515 - WordPress File Upload RCE\n\nexploit", "creation_timestamp": "2025-09-03T08:08:47.000000Z"}, {"uuid": "caa07e7e-912d-46d7-ba46-0e41bc04b2aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "Telegram/7FcFWuNWPidnSTqDbK2SI7frFY8bVIrg6sQ2oUz4aEJxH6Y", "content": "", "creation_timestamp": "2025-09-27T03:01:09.000000Z"}, {"uuid": "9384ad2f-3a5f-4114-a303-66055c3f0ec1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35452", "type": "seen", "source": "https://t.me/canyoupwnme/6911", "content": "CVE-2025-35452 - Pan-Tilt-Zoom cameras default administrative credentials for web interface\nhttps://cvefeed.io/vuln/detail/CVE-2025-35452", "creation_timestamp": "2025-09-05T20:10:42.000000Z"}, {"uuid": "aeeb0c0a-4b37-411d-a528-ea4747c900c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "https://t.me/CyberBulletin/3511", "content": "\u26a1\ufe0fCode-hosting platform GitHub has rolled out patches for a remote code execution (RCE) vulnerability in multiple Enterprise Server versions.\n\nTracked as CVE-2025-3509 (CVSS score of 7.1), the flaw could have allowed attackers to exploit the pre-receive hook functionality to bind to ports that are dynamically allocated and become available.\n\n#CyberBulletin", "creation_timestamp": "2025-06-26T06:35:34.000000Z"}, {"uuid": "bd0820f6-f954-41ab-b9c7-c36903156dc0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35008", "type": "published-proof-of-concept", "source": "Telegram/moKxMeV_w6YSpQqBgU1ND2_P5BDqpW_LscmH9kOqiSF4Xg8", "content": "", "creation_timestamp": "2025-06-08T22:04:33.000000Z"}, {"uuid": "997ce4c8-8519-4313-a09b-c46381939cf6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35010", "type": "published-proof-of-concept", "source": "Telegram/moKxMeV_w6YSpQqBgU1ND2_P5BDqpW_LscmH9kOqiSF4Xg8", "content": "", "creation_timestamp": "2025-06-08T22:04:33.000000Z"}, {"uuid": "297d3fae-3a2b-4ae2-ac23-cfe86f01c0e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35006", "type": "published-proof-of-concept", "source": "Telegram/moKxMeV_w6YSpQqBgU1ND2_P5BDqpW_LscmH9kOqiSF4Xg8", "content": "", "creation_timestamp": "2025-06-08T22:04:33.000000Z"}, {"uuid": "421ac1ac-28b1-4e9f-9588-5c394121ee42", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35007", "type": "published-proof-of-concept", "source": "Telegram/moKxMeV_w6YSpQqBgU1ND2_P5BDqpW_LscmH9kOqiSF4Xg8", "content": "", "creation_timestamp": "2025-06-08T22:04:33.000000Z"}, {"uuid": "315a4d81-3d56-44d0-8fe4-a0f10517b8ac", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "https://t.me/true_secator/7165", "content": "GitHub \u0432\u044b\u0441\u0442\u0443\u043f\u0438\u043b\u0430 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u0434\u043b\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u044b\u0441\u043e\u043a\u043e\u0439 \u0441\u0442\u0435\u043f\u0435\u043d\u0438 \u0441\u0435\u0440\u044c\u0435\u0437\u043d\u043e\u0441\u0442\u0438 \u0432 \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u0438\u0445 \u0432\u0435\u0440\u0441\u0438\u044f\u0445 Enterprise Server, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u043f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0443\u0434\u0430\u043b\u0435\u043d\u043d\u043e \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434.\n\n\u041e\u0448\u0438\u0431\u043a\u0430 \u043e\u0442\u0441\u043b\u0435\u0436\u0438\u0432\u0430\u0435\u0442\u0441\u044f \u043a\u0430\u043a CVE-2025-3509 \u0438 \u0438\u043c\u0435\u0435\u0442 \u043e\u0446\u0435\u043d\u043a\u0443 CVSS 7,1.\n\n\u041e\u043d\u0430 \u0441\u0432\u044f\u0437\u0430\u043d\u0430 \u0441 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u044c\u044e \u0437\u0430\u0434\u0435\u0439\u0441\u0442\u0432\u043e\u0432\u0430\u043d\u0438\u044f \u0444\u0443\u043d\u043a\u0446\u0438\u043e\u043d\u0430\u043b\u0430 \u043f\u0440\u0435\u0434\u0432\u0430\u0440\u0438\u0442\u0435\u043b\u044c\u043d\u043e\u0433\u043e \u043f\u0440\u0438\u0435\u043c\u0430 \u0434\u043b\u044f \u043f\u0440\u0438\u0432\u044f\u0437\u043a\u0438 \u043a \u043f\u043e\u0440\u0442\u0430\u043c, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0434\u0438\u043d\u0430\u043c\u0438\u0447\u0435\u0441\u043a\u0438 \u0432\u044b\u0434\u0435\u043b\u044f\u044e\u0442\u0441\u044f \u0438 \u0441\u0442\u0430\u043d\u043e\u0432\u044f\u0442\u0441\u044f \u0434\u043e\u0441\u0442\u0443\u043f\u043d\u044b\u043c\u0438.\n\n\u041f\u043e \u0434\u0430\u043d\u043d\u044b\u043c GitHub, \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u0430 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u0440\u0438 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0443\u0441\u043b\u043e\u0432\u0438\u044f\u0445, \u043d\u0430\u043f\u0440\u0438\u043c\u0435\u0440, \u0432\u043e \u0432\u0440\u0435\u043c\u044f \u043f\u0440\u043e\u0446\u0435\u0441\u0441\u0430 \u0433\u043e\u0440\u044f\u0447\u0435\u0433\u043e \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f, \u0438 \u0442\u0440\u0435\u0431\u0443\u0435\u0442 \u043b\u0438\u0431\u043e \u0440\u0430\u0437\u0440\u0435\u0448\u0435\u043d\u0438\u0439 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430 \u0441\u0430\u0439\u0442\u0430, \u043b\u0438\u0431\u043e \u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u0435\u043b\u044f \u0441 \u043f\u0440\u0430\u0432\u0430\u043c\u0438 \u043d\u0430 \u0438\u0437\u043c\u0435\u043d\u0435\u043d\u0438\u0435 \u0440\u0435\u043f\u043e\u0437\u0438\u0442\u043e\u0440\u0438\u0435\u0432, \u0441\u043e\u0434\u0435\u0440\u0436\u0430\u0449\u0438\u0445 pre-receive hooks.\n\n\u041f\u0435\u0440\u0432\u043e\u043d\u0430\u0447\u0430\u043b\u044c\u043d\u043e\u0435 \u0438\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u0435 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u0438 \u043d\u0435 \u0431\u044b\u043b\u043e \u0440\u0435\u0430\u043b\u0438\u0437\u043e\u0432\u0430\u043d\u043e \u0434\u043e\u043b\u0436\u043d\u044b\u043c \u043e\u0431\u0440\u0430\u0437\u043e\u043c, \u0447\u0442\u043e \u043e\u0442\u043a\u0440\u044b\u0432\u0430\u043b\u043e \u0432\u043e\u0437\u043c\u043e\u0436\u043d\u043e\u0441\u0442\u0438 \u0432 \u043e\u043f\u0440\u0435\u0434\u0435\u043b\u0435\u043d\u043d\u044b\u0445 \u0441\u043b\u0443\u0447\u0430\u044f\u0445 \u0432\u043e\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u0442\u044c\u0441\u044f \u0435\u044e, \u0432 \u0441\u0432\u044f\u0437\u0438 \u0441 \u0447\u0435\u043c \u0431\u044b\u043b \u0432\u044b\u043f\u0443\u0449\u0435\u043d \u043d\u043e\u0432\u044b\u0439 \u043f\u0430\u0442\u0447.\n\n\u0423\u0441\u043f\u0435\u0448\u043d\u0430\u044f \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u044f CVE-2025-3509 \u043c\u043e\u0433\u043b\u0430 \u043f\u043e\u0437\u0432\u043e\u043b\u0438\u0442\u044c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u0438 \u043f\u043e\u0432\u044b\u0441\u0438\u0442\u044c \u0441\u0432\u043e\u0438 \u043f\u0440\u0438\u0432\u0438\u043b\u0435\u0433\u0438\u0438, \u0447\u0442\u043e \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u043c\u043e\u0433\u043b\u043e \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a \u043f\u043e\u043b\u043d\u043e\u0439 \u043a\u043e\u043c\u043f\u0440\u043e\u043c\u0435\u0442\u0430\u0446\u0438\u0438 \u0441\u0438\u0441\u0442\u0435\u043c\u044b.\n\n\u0421\u043e\u0433\u043b\u0430\u0441\u043d\u043e GitHub, \u0437\u0430\u0442\u0440\u043e\u043d\u0443\u0442\u044b \u0432\u0441\u0435 \u0432\u044b\u043f\u0443\u0441\u043a\u0438 Enterprise Server \u0434\u043e 3.18.\n\n\u0418\u0441\u043f\u0440\u0430\u0432\u043b\u0435\u043d\u0438\u044f \u043e\u0448\u0438\u0431\u043a\u0438 \u0431\u044b\u043b\u0438 \u0432\u043a\u043b\u044e\u0447\u0435\u043d\u044b \u0432 \u0432\u0435\u0440\u0441\u0438\u0438 Enterprise Server 3.17.1, 3.16.4, 3.15.8, 3.14.13 \u0438 3.13.16, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0431\u044b\u043b\u0438 \u0432\u044b\u043f\u0443\u0449\u0435\u043d\u044b \u043d\u0430 \u043f\u0440\u043e\u0448\u043b\u043e\u0439 \u043d\u0435\u0434\u0435\u043b\u0435.\n\n\u0420\u0430\u0441\u043a\u0440\u044b\u0442\u0438\u0435 CVE-2025-3509 \u043f\u0440\u043e\u0438\u0437\u043e\u0448\u043b\u043e \u0447\u0435\u0440\u0435\u0437 \u043f\u0440\u043e\u0433\u0440\u0430\u043c\u043c\u0443 \u0432\u043e\u0437\u043d\u0430\u0433\u0440\u0430\u0436\u0434\u0435\u043d\u0438\u044f \u0437\u0430 \u043e\u0431\u043d\u0430\u0440\u0443\u0436\u0435\u043d\u0438\u0435 \u043e\u0448\u0438\u0431\u043e\u043a.\n\n\u041a\u0430\u043a \u043e\u0442\u043c\u0435\u0447\u0430\u0435\u0442 \u0432 GitHub, \u043a\u0430\u043a\u0438\u0435-\u043b\u0438\u0431\u043e \u0443\u043f\u043e\u043c\u0438\u043d\u0430\u043d\u0438\u044f \u043e \u0435\u0435 \u0440\u0435\u0430\u043b\u044c\u043d\u043e\u0439 \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0430\u0446\u0438\u0438 \u043d\u0435 \u0432\u0441\u0442\u0440\u0435\u0447\u0430\u043b\u0438\u0441\u044c.", "creation_timestamp": "2025-06-25T15:34:20.000000Z"}, {"uuid": "b7ad6dee-c0b5-45ea-bdbb-45691ef111c3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "Telegram/pNTteL-Xx8i8chGncpiIBXbULPUr3pQKBk06IlAIn1UZCI0", "content": "", "creation_timestamp": "2025-06-23T11:00:06.000000Z"}, {"uuid": "f94b1534-2864-4477-9b33-2a5ea3b15a19", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35009", "type": "published-proof-of-concept", "source": "Telegram/moKxMeV_w6YSpQqBgU1ND2_P5BDqpW_LscmH9kOqiSF4Xg8", "content": "", "creation_timestamp": "2025-06-08T22:04:33.000000Z"}, {"uuid": "8421ae90-bcaa-435f-87a3-59a2bc8ef5e0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3506", "type": "seen", "source": "https://t.me/cvedetector/24823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3506 - Checkmk Unauthenticated File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3506 \nPublished : May 8, 2025, 12:15 p.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : Files to be deployed with agents are accessible without authentication in Checkmk 2.1.0, Checkmk 2.2.0, Checkmk 2.3.0 and Severity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T15:56:41.000000Z"}, {"uuid": "362dcb4f-bdc1-4c49-8424-216e4a8b331e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3597", "type": "seen", "source": "https://t.me/cvedetector/25070", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3597 - Firelight Lightbox WordPress Plugin Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3597 \nPublished : May 12, 2025, 6:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The Firelight Lightbox WordPress plugin before 2.3.15 does not prevent users with post writing capabilities from executing arbitrary Javascript when the jQuery Metadata library is enabled. While this feature is meant to only be available to Pro version users, it can be activated in the free version too, making it theoretically exploitable there as well. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"12 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-12T10:15:38.000000Z"}, {"uuid": "bb518ddd-1337-49cf-95cd-d67d5e97807c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3520", "type": "seen", "source": "https://t.me/cvedetector/23304", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3520 - \"WordPress Avatar Plugin File Deletion Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-3520 \nPublished : April 18, 2025, 2:15 a.m. | 2\u00a0hours, 15\u00a0minutes ago \nDescription : The Avatar plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file path validation in a function in all versions up to, and including, 0.1.4. This makes it possible for authenticated attackers, with Subscriber-level access and above, to delete arbitrary files on the server, which can easily lead to remote code execution when the right file is deleted (such as wp-config.php). \nSeverity: 8.1 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T06:32:44.000000Z"}, {"uuid": "b584da02-d5d5-4eb9-9dba-66f023f7495e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3509", "type": "seen", "source": "https://t.me/cvedetector/23290", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3509 - GitHub Enterprise Server Remote Code Execution Vulnerability in Pre-Receive Hook Functionality\", \n  \"Content\": \"CVE ID : CVE-2025-3509 \nPublished : April 17, 2025, 11:15 p.m. | 1\u00a0hour, 10\u00a0minutes ago \nDescription : A Remote Code Execution (RCE) vulnerability was identified in GitHub Enterprise Server that allowed attackers to execute arbitrary code by exploiting the pre-receive hook functionality, potentially leading to privilege escalation and system compromise. The vulnerability involves using dynamically allocated ports that become temporarily available, such as during a hot patch upgrade. This means the vulnerability is only exploitable during specific operational conditions, which limits the attack window. Exploitation required either site administrator permissions to enable and configure pre-receive hooks or a user with permissions to modify repositories containing pre-receive hooks where this functionality was already enabled. This vulnerability affected all versions of GitHub Enterprise Server prior to 3.17 and was fixed in versions 3.16.2, 3.15.6, 3.14.11, 3.13.14. This vulnerability was reported via the GitHub Bug Bounty program. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"18 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-18T03:12:04.000000Z"}, {"uuid": "406a254e-f947-48a2-b6d9-981b3453c11d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35471", "type": "seen", "source": "https://t.me/cvedetector/25139", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-35471 - Conda Forge OpenSSL-Feedstock Local Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-35471 \nPublished : May 13, 2025, 2:15 a.m. | 25\u00a0minutes ago \nDescription : conda-forge openssl-feedstock before 066e83c (2024-05-20), on Microsoft Windows, configures OpenSSL to use an OPENSSLDIR file path that can be written to by non-privilged local users. By writing a specially crafted openssl.cnf file in OPENSSLDIR, a non-privileged local user can execute arbitrary code with the privileges of the user or process loading openssl-feedstock DLLs. Miniforge before 24.5.0 is also affected. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-13T05:30:11.000000Z"}, {"uuid": "eb4b9d60-d894-40b0-a65f-a6789b406229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3528", "type": "seen", "source": "https://t.me/cvedetector/24944", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3528 - OpenShift Mirror Registry Privilege Escalation Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3528 \nPublished : May 9, 2025, 12:15 p.m. | 1\u00a0hour, 54\u00a0minutes ago \nDescription : A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"09 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-09T16:12:39.000000Z"}, {"uuid": "9035efa3-44e2-4706-a7e0-0c34fd5dd588", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3511", "type": "seen", "source": "https://t.me/cvedetector/23731", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3511 - Mitsubishi Electric Corporation CC-Link IE TSN Denial of Service Remote Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-3511 \nPublished : April 25, 2025, 6:15 a.m. | 32\u00a0minutes ago \nDescription : Improper Validation of Specified Quantity in Input vulnerability in Mitsubishi Electric Corporation CC-Link IE TSN Remote I/O module, CC-Link IE TSN Analog-Digital Converter module, CC-Link IE TSN Digital-Analog Converter module, CC-Link IE TSN FPGA module and CC-Link IE TSN Remote Station Communication LSI CP620 with GbE-PHY allows a remote unauthenticated attacker to cause a Denial of Service condition in the products by sending specially crafted UDP packets. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"25 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-25T09:09:11.000000Z"}, {"uuid": "f1b3b6da-dd96-45cd-988b-68271aabe58a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3576", "type": "seen", "source": "https://t.me/cvedetector/22921", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3576 - Kerberos MIT RC4-MD5 GSSAPI Spoofing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3576 \nPublished : April 15, 2025, 6:15 a.m. | 42\u00a0minutes ago \nDescription : A vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering. \nSeverity: 5.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T09:04:44.000000Z"}, {"uuid": "ed4b5b6b-5981-4449-8723-457975914f66", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3587", "type": "seen", "source": "https://t.me/cvedetector/22884", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3587 - ZeroWdd/Code-Projects StudentManager Remote Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-3587 \nPublished : April 14, 2025, 8:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in ZeroWdd/code-projects studentmanager 1.0. This vulnerability affects unknown code of the file /getTeacherList. The manipulation leads to improper authorization. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T23:02:13.000000Z"}, {"uuid": "9518fd28-047c-49ab-871c-bfa448fee8db", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3571", "type": "seen", "source": "https://t.me/cvedetector/22867", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3571 - Fannuo Enterprise Content Management System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3571 \nPublished : April 14, 2025, 3:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : A vulnerability was found in Fannuo Enterprise Content Management System \u51e1\u8bfa\u4f01\u4e1a\u7f51\u7ad9\u7ba1\u7406\u7cfb\u7edf 1.1/4.0. It has been declared as critical. This vulnerability affects unknown code of the file admin/cms_chip.php. The manipulation of the argument del leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T18:51:25.000000Z"}, {"uuid": "ee7683a9-963e-4836-85fd-9ca51ca6563b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35965", "type": "seen", "source": "https://t.me/cvedetector/23647", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-35965 - Mattermost Denial-of-Service DoS Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-35965 \nPublished : April 24, 2025, 7:15 a.m. | 1\u00a0hour, 15\u00a0minutes ago \nDescription : Mattermost versions 10.4.x <=<=<=\nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"24 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-24T11:23:15.000000Z"}, {"uuid": "529ca6e3-c3b0-47ef-99a9-871437ecf19b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3530", "type": "seen", "source": "https://t.me/cvedetector/23581", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3530 - WordPress Simple Shopping Cart Price Tampering Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3530 \nPublished : April 23, 2025, 8:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to product price manipulation in all versions up to, and including, 5.1.2. This is due to a logic flaw involving the inconsistent use of parameters during the cart addition process. The plugin uses the parameter 'product_tmp_two' for computing a security hash against price tampering while using 'wspsc_product' to display the product, allowing an unauthenticated attacker to substitute details from a cheaper product and bypass payment for a more expensive item. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T12:48:32.000000Z"}, {"uuid": "0d49d95e-4a1a-4182-a7f6-d5436bc8f86b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3529", "type": "seen", "source": "https://t.me/cvedetector/23580", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3529 - WordPress Simple Shopping Cart Sensitive Information Exposure\", \n  \"Content\": \"CVE ID : CVE-2025-3529 \nPublished : April 23, 2025, 8:15 a.m. | 1\u00a0hour, 57\u00a0minutes ago \nDescription : The WordPress Simple Shopping Cart plugin for WordPress is vulnerable to Sensitive Information Exposure in all versions up to, and including, 5.1.2 via the 'file_url' parameter. This makes it possible for unauthenticated attackers to view potentially sensitive information and download a digital product without paying for it. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"23 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-23T12:48:31.000000Z"}, {"uuid": "4ddcb97a-8440-4ce5-a1c2-6b36940695b0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "https://t.me/cvedetector/23489", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3519 - Unblu Spark Authorization Bypass File Replacement\", \n  \"Content\": \"CVE ID : CVE-2025-3519 \nPublished : April 22, 2025, 9:15 a.m. | 40\u00a0minutes ago \nDescription : An authorization bypass\u00a0in\u00a0Unblu Spark allows a\u00a0participant of a conversation\u00a0to replace an existing, uploaded file.  \n  \nEvery uploaded file in Unblu gets assigned with a randomly generated Universally Unique ID (UUID). In case a participant of this or another conversation gets access to such a file ID, it can be used to replace the file without changing the file name and details or the name of the user who uploaded the file. During the upload, file interception and allowed file type rules are still applied correctly. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T12:33:00.000000Z"}, {"uuid": "aba5b7a1-1cd7-41d5-bb8b-5ef8ee27a98a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3518", "type": "seen", "source": "https://t.me/cvedetector/23488", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3518 - Apache Stratos File Upload Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3518 \nPublished : April 22, 2025, 9:15 a.m. | 40\u00a0minutes ago \nDescription : It technically possible for a user to upload a file to a conversation despite the file upload functionality being disabled.  \n  \nThe file upload functionality can be enabled or disabled for specific use cases through configuration. In case the functionality is disabled for at least one use case, the system nevertheless allows files to be uploaded through direct API requests. During the upload file, interception and allowed file type rules are still applied correctly.  \n  \nIf file sharing is generally enabled, this issue is not of concern. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T12:33:00.000000Z"}, {"uuid": "4117e2bd-9ba8-4265-8459-90d18689ea80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3577", "type": "seen", "source": "https://t.me/cvedetector/23480", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3577 - Zyxel AMG1302-T10B Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3577 \nPublished : April 22, 2025, 3:15 a.m. | 35\u00a0minutes ago \nDescription : **UNSUPPORTED WHEN ASSIGNED** A path traversal vulnerability in the web management interface of the Zyxel\u00a0AMG1302-T10B firmware version\u00a02.00(AAJC.16)C0 could allow an authenticated attacker with\u00a0administrator privileges to\u00a0access restricted directories by sending a crafted HTTP request to an affected device. \nSeverity: 4.9 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"22 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-22T05:51:43.000000Z"}, {"uuid": "03214c13-5006-45c3-8341-91fe50f3050a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3579", "type": "seen", "source": "https://t.me/cvedetector/22932", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3579 - Aidex Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3579 \nPublished : April 15, 2025, 9:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : In versions prior to Aidex 1.7, an authenticated malicious user, taking advantage of an open registry, could execute unauthorised commands within the system. This includes executing operating system (Unix) commands, interacting with internal services such as PHP or MySQL, and even invoking native functions of the framework used, such as Laravel or Symfony. This execution is achieved by Prompt Injection attacks through the /api//message endpoint, manipulating the content of the \u2018content\u2019 parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T13:15:49.000000Z"}, {"uuid": "d9c50317-e2f1-4d58-a883-cf2cc94e592a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3523", "type": "seen", "source": "https://t.me/cvedetector/22973", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3523 - Thunderbird External Attachment Link Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3523 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : When an email contains multiple attachments with external links via the X-Mozilla-External-Attachment-URL header, only the last link is shown when hovering over any attachment. Although the correct link is used on click, the misleading hover text could trick users into downloading content from untrusted sources. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:15.000000Z"}, {"uuid": "ee0304b4-17f0-4af3-86a0-c84fdc352a04", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3522", "type": "seen", "source": "https://t.me/cvedetector/22972", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3522 - Thunderbird External Attachment URL Processing Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3522 \nPublished : April 15, 2025, 3:16 p.m. | 2\u00a0hours ago \nDescription : Thunderbird processes the X-Mozilla-External-Attachment-URL header to handle attachments which can be hosted externally. When an email is opened, Thunderbird accesses the specified URL to  determine file size, and navigates to it when the user clicks the attachment. Because the URL is not validated or sanitized, it can reference internal resources like chrome:// or SMB share file:// links, potentially leading to hashed Windows credential leakage and opening the door to more serious security issues. This vulnerability affects Thunderbird < 137.0.2 and Thunderbird < 128.9.2. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T19:57:14.000000Z"}, {"uuid": "d2124c83-7c65-45ee-a145-0e4be118ecb7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3573", "type": "seen", "source": "https://t.me/cvedetector/22926", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3573 - \"jQuery Validation Cross-site Scripting (XSS)\"\", \n  \"Content\": \"CVE ID : CVE-2025-3573 \nPublished : April 15, 2025, 5:15 a.m. | 1\u00a0hour, 42\u00a0minutes ago \nDescription : Versions of the package jquery-validation before 1.20.0 are vulnerable to Cross-site Scripting (XSS) in the showLabel() function, which may take input from a user-controlled placeholder value. This value will populate a message via $.validator.messages in a user localizable dictionary. \nSeverity: 6.1 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T09:04:50.000000Z"}, {"uuid": "6f0e3eb9-da79-4815-80d5-937e5de4c6a1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3569", "type": "seen", "source": "https://t.me/cvedetector/22879", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3569 - \"JamesZBL/code-projects db-hospital-drug Remote Code Execution via Improper Authorization\"\", \n  \"Content\": \"CVE ID : CVE-2025-3569 \nPublished : April 14, 2025, 2:15 p.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file ShiroConfig.java. The manipulation leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T18:51:40.000000Z"}, {"uuid": "fc9f8946-54b1-467d-aa34-bf3af1d0e93d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "https://t.me/cvedetector/22878", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3568 - Webkul Krayin CRM SVG File Handler Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3568 \nPublished : April 14, 2025, 2:15 p.m. | 2\u00a0hours, 19\u00a0minutes ago \nDescription : A vulnerability has been found in Webkul Krayin CRM up to 2.1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/settings/users/edit/ of the component SVG File Handler. The manipulation leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor prepares a fix for the next major release and explains that he does not think therefore that this should qualify for a CVE. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T18:51:39.000000Z"}, {"uuid": "a681826f-658a-4be5-86bd-30fe346ece36", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3557", "type": "seen", "source": "https://t.me/cvedetector/22839", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3557 - ScriptAndTools eCommerce Cross-Site Request Forgery\", \n  \"Content\": \"CVE ID : CVE-2025-3557 \nPublished : April 14, 2025, 8:15 a.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this issue is some unknown functionality. The manipulation leads to cross-site request forgery. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple endpoints are affected. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T13:00:06.000000Z"}, {"uuid": "727e4c81-9163-42a4-92c3-d8251ac601fa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3556", "type": "seen", "source": "https://t.me/cvedetector/22838", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3556 - ScriptAndTools eCommerce-website-in-PHP Remote Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3556 \nPublished : April 14, 2025, 8:15 a.m. | 2\u00a0hours, 6\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected by this vulnerability is an unknown functionality of the file /admin/login.php. The manipulation leads to improper restriction of excessive authentication attempts. The attack can be launched remotely. The complexity of an attack is rather high. The exploitation appears to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T12:59:44.000000Z"}, {"uuid": "1495aee9-4d3b-4941-92b7-c80b7ca97159", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3578", "type": "seen", "source": "https://t.me/cvedetector/22931", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3578 - Aidex Privilege Escalation and Information Disclosure Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3578 \nPublished : April 15, 2025, 9:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : A malicious, authenticated user in Aidex, versions prior to 1.7, could list credentials of other users, create or modify existing users in the application, list credentials of users in production or development environments. In addition, it would be possible to cause bugs that would result in the exfiltration of sensitive information, such as details about the software or internal system paths. These actions could be carried out through the misuse of LLM Prompt (chatbot) technology, via the /api//message endpoint, by manipulating the contents of the \u2018content\u2019 parameter. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T13:15:46.000000Z"}, {"uuid": "73a927ff-4809-4433-bb66-e658057a1a49", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3575", "type": "seen", "source": "https://t.me/cvedetector/22930", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3575 - T-INNOVA Deporsite Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2025-3575 \nPublished : April 15, 2025, 9:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via \"idUsuario\" parameter in \"/helper/Familia/establecerUsuarioSeleccion\" endpoint. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T13:15:45.000000Z"}, {"uuid": "f3cad524-c7b6-49dd-8af9-b647fec6b974", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3574", "type": "seen", "source": "https://t.me/cvedetector/22929", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3574 - T-INNOVA Deporsite Insecure Direct Object Reference\", \n  \"Content\": \"CVE ID : CVE-2025-3574 \nPublished : April 15, 2025, 9:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : Insecure Direct Object Reference vulnerability in Deporsite from T-INNOVA allows an attacker to retrieve sensitive information from others users via \"idUsuario\" parameter in \"/helper/Familia/obtenerFamiliaUsuario\" endpoint. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T13:15:44.000000Z"}, {"uuid": "b5d03a80-d5ac-4123-a9da-7a22c467194c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3593", "type": "seen", "source": "https://t.me/cvedetector/22901", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3593 - ZHENFENG13 My-Blog-layui Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3593 \nPublished : April 14, 2025, 11:15 p.m. | 1\u00a0hour, 34\u00a0minutes ago \nDescription : A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been declared as critical. This vulnerability affects the function Upload of the file /admin/upload/authorImg/. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T03:13:14.000000Z"}, {"uuid": "53317af5-e9a3-4d43-a37d-0a80758ff421", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3589", "type": "seen", "source": "https://t.me/cvedetector/22890", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3589 - SourceCodester Music Class Enrollment System SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3589 \nPublished : April 14, 2025, 9:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in SourceCodester Music Class Enrollment System 1.0. Affected is an unknown function of the file /manage_class.php. The manipulation of the argument ID leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T01:32:43.000000Z"}, {"uuid": "909d092b-37f0-4bdb-ac3a-0460227c8504", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3588", "type": "seen", "source": "https://t.me/cvedetector/22889", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3588 - \"JSONschema2pojo JSON File Handler Stack-Based Buffer Overflow\"\", \n  \"Content\": \"CVE ID : CVE-2025-3588 \nPublished : April 14, 2025, 9:15 p.m. | 1\u00a0hour, 31\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in joelittlejohn jsonschema2pojo 1.2.2. This issue affects the function apply of the file org/jsonschema2pojo/rules/SchemaRule.java of the component JSON File Handler. The manipulation leads to stack-based buffer overflow. Attacking locally is a requirement. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T01:32:42.000000Z"}, {"uuid": "04ae8de6-aa85-4657-8a27-25fbebb0c8c7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3591", "type": "seen", "source": "https://t.me/cvedetector/22888", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3591 - ZHENFENG13/My-Blog-layui Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3591 \nPublished : April 14, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /admin/v1/blog/edit. The manipulation leads to cross site scripting. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T01:32:41.000000Z"}, {"uuid": "1e9e69a7-83f2-418a-a7c5-be0441336644", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3590", "type": "seen", "source": "https://t.me/cvedetector/22887", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3590 - Adianti Framework Remote Deserialization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3590 \nPublished : April 14, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : A vulnerability has been found in Adianti Framework up to 8.0 and classified as critical. Affected by this vulnerability is an unknown functionality. The manipulation leads to deserialization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. Upgrading to version 8.1 is able to address this issue. It is recommended to upgrade the affected component. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T01:32:40.000000Z"}, {"uuid": "8338c502-805e-4ad9-9c21-4be9f4f9e780", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3592", "type": "seen", "source": "https://t.me/cvedetector/22886", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3592 - ZHENFENG13 My-Blog-layui Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3592 \nPublished : April 14, 2025, 10:15 p.m. | 31\u00a0minutes ago \nDescription : A vulnerability was found in ZHENFENG13/code-projects My-Blog-layui 1.0. It has been classified as problematic. This affects an unknown part of the file /admin/v1/link/edit. The manipulation leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. Multiple parameters might be affected. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"15 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-15T01:32:40.000000Z"}, {"uuid": "a9a648f4-caa0-4827-b97a-72e3772f2528", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3585", "type": "seen", "source": "https://t.me/cvedetector/22881", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3585 - Westboy CicadasCMS Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3585 \nPublished : April 14, 2025, 6:15 p.m. | 24\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in westboy CicadasCMS 1.0. This affects an unknown part of the file /upload/ of the component JSP Parser. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T21:22:01.000000Z"}, {"uuid": "f83637bf-b8a1-4ce6-a50f-5cfb7f590487", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3566", "type": "seen", "source": "https://t.me/cvedetector/22847", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3566 - Veal98 \u5c0f\u725b\u8089 Echo Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3566 \nPublished : April 14, 2025, 1:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in veal98 \u5c0f\u725b\u8089 Echo \u5f00\u6e90\u793e\u533a\u7cfb\u7edf 4.2. This issue affects the function uploadMdPic of the file /discuss/uploadMdPic. The manipulation of the argument editormd-image-file leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T17:10:46.000000Z"}, {"uuid": "8071ceec-4b4b-4cdc-b9a2-2c4539e76b70", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3567", "type": "seen", "source": "https://t.me/cvedetector/22846", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3567 - Veal98 \u5c0f\u725b\u8089 Echo Remote Authorization Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3567 \nPublished : April 14, 2025, 1:15 p.m. | 1\u00a0hour, 13\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, was found in veal98 \u5c0f\u725b\u8089 Echo \u5f00\u6e90\u793e\u533a\u7cfb\u7edf 4.2. Affected is the function preHandle of the file src/main/java/com/greate/community/controller/interceptor/LoginTicketInterceptor.java of the component Ticket Handler. The manipulation leads to improper authorization. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T17:10:45.000000Z"}, {"uuid": "ca5d52e4-5def-48da-84c7-35c20f4b6ba5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3560", "type": "seen", "source": "https://t.me/cvedetector/22845", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3560 - Ghostxbh Uzy-SSM-Mall Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3560 \nPublished : April 14, 2025, 10:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0 and classified as problematic. This issue affects some unknown processing of the file /product. The manipulation of the argument product_name leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T14:40:25.000000Z"}, {"uuid": "b80c4eec-ae70-4ec0-b93c-9e03281c9089", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3561", "type": "seen", "source": "https://t.me/cvedetector/22844", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3561 - Ghostxbh Uzy-SSM-Mall CSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3561 \nPublished : April 14, 2025, 10:15 a.m. | 2\u00a0hours, 9\u00a0minutes ago \nDescription : A vulnerability was found in ghostxbh uzy-ssm-mall 1.0.0. It has been classified as problematic. Affected is an unknown function. The manipulation leads to cross-site request forgery. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T14:40:24.000000Z"}, {"uuid": "7db85c03-9302-4f7b-9ccc-50a86e095fd5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3563", "type": "seen", "source": "https://t.me/cvedetector/22843", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3563 - WuzhiCMS Code Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3563 \nPublished : April 14, 2025, 11:15 a.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : A vulnerability was found in WuzhiCMS 4.1. It has been rated as critical. Affected by this issue is the function Set of the file /index.php?m=attachment&f=index&_su=wuzhicms&v=set&submit=1 of the component Setting Handler. The manipulation of the argument Setting leads to code injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T14:40:23.000000Z"}, {"uuid": "55ec8b6f-85bb-4dde-a943-e60eca113ecc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3562", "type": "seen", "source": "https://t.me/cvedetector/22842", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3562 - Yonyou YonBIP Remote Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3562 \nPublished : April 14, 2025, 11:15 a.m. | 1\u00a0hour, 9\u00a0minutes ago \nDescription : A vulnerability was found in Yonyou YonBIP MA2.7. It has been declared as problematic. Affected by this vulnerability is the function FileInputStream of the file /mobsm/common/userfile. The manipulation of the argument path leads to path traversal. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T14:40:23.000000Z"}, {"uuid": "b9d1a6ff-e529-4c14-89c8-c597433410f4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3570", "type": "seen", "source": "https://t.me/cvedetector/22866", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3570 - JamesZBL/code-projects db-hospital-drug Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3570 \nPublished : April 14, 2025, 3:15 p.m. | 1\u00a0hour, 19\u00a0minutes ago \nDescription : A vulnerability was found in JamesZBL/code-projects db-hospital-drug 1.0. It has been classified as problematic. This affects the function Save of the file ContentController.java. The manipulation of the argument content leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.5 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T18:51:24.000000Z"}, {"uuid": "4312544a-dcd0-449d-80e1-83685977f524", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3565", "type": "seen", "source": "https://t.me/cvedetector/22849", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3565 - Apache Struts Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3565 \nPublished : April 14, 2025, 12:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in huanfenz/code-projects StudentManager 1.0. This vulnerability affects unknown code of the file /upload/uploadArticle.do of the component Announcement Management Section. The manipulation of the argument File leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.7 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T17:10:47.000000Z"}, {"uuid": "a56079ca-6fcb-4fa2-9931-1dfe7d5209eb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3564", "type": "seen", "source": "https://t.me/cvedetector/22848", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3564 - Huanfenz Code-Projects StudentManager Teacher String Handler Improper Authorization Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3564 \nPublished : April 14, 2025, 12:15 p.m. | 2\u00a0hours, 13\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in huanfenz/code-projects StudentManager up to 1.0. This affects an unknown part of the component Teacher String Handler. The manipulation leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T17:10:47.000000Z"}, {"uuid": "011ddea5-29b8-4451-8890-63b7053d92c9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3553", "type": "seen", "source": "https://t.me/cvedetector/22833", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3553 - \"Phpshe SQL Injection Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-3553 \nPublished : April 14, 2025, 6:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : A vulnerability was found in phpshe 1.8. It has been declared as critical. This vulnerability affects the function pe_delete of the file /admin.php?mod=brand&act=del. The manipulation of the argument brand_id[] leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T10:28:55.000000Z"}, {"uuid": "0c7d73b1-6c8d-4cec-962c-2e23ac41916e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3552", "type": "seen", "source": "https://t.me/cvedetector/22832", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3552 - Lingxing ERP Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3552 \nPublished : April 14, 2025, 6:15 a.m. | 2\u00a0hours, 4\u00a0minutes ago \nDescription : A vulnerability was found in Lingxing ERP 2. It has been classified as critical. This affects an unknown part of the file /Api/TinyMce/UploadAjax.ashx. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T10:28:54.000000Z"}, {"uuid": "b58ed640-956e-4d75-89ed-9ffd82f2557e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3559", "type": "seen", "source": "https://t.me/cvedetector/22837", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3559 - Ghostxbh uzy-ssm-mall SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3559 \nPublished : April 14, 2025, 9:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : A vulnerability has been found in ghostxbh uzy-ssm-mall 1.0.0 and classified as critical. This vulnerability affects the function ForeProductListController of the file /mall/product/0/20. The manipulation of the argument orderBy leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T12:59:43.000000Z"}, {"uuid": "0299e448-5003-4a06-a22b-459a6adc9ce2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3558", "type": "seen", "source": "https://t.me/cvedetector/22836", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3558 - Ghostxbh Uzy-SSM-Mall Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3558 \nPublished : April 14, 2025, 9:15 a.m. | 1\u00a0hour, 6\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in ghostxbh uzy-ssm-mall 1.0.0. This affects an unknown part of the file /mall/user/uploadUserHeadImage. The manipulation of the argument File leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T12:59:21.000000Z"}, {"uuid": "89b804b6-8597-4473-b808-fdd78207dfb4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3554", "type": "seen", "source": "https://t.me/cvedetector/22828", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3554 - \"PhpShe Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-3554 \nPublished : April 14, 2025, 7:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : A vulnerability was found in phpshe 1.8. It has been rated as problematic. This issue affects some unknown processing of the file api.php?mod=cron&act=buyer. The manipulation of the argument act leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T10:28:50.000000Z"}, {"uuid": "e0ec92c8-fb9f-4a06-a32b-f0e1bd2071ef", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3555", "type": "seen", "source": "https://t.me/cvedetector/22827", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3555 - ScriptAndTools eCommerce-website-in-PHP Remote Authentication Bypass Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3555 \nPublished : April 14, 2025, 7:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in ScriptAndTools eCommerce-website-in-PHP 3.0. Affected is an unknown function of the file /login.php. The manipulation leads to improper restriction of excessive authentication attempts. It is possible to launch the attack remotely. The complexity of an attack is rather high. The exploitability is told to be difficult. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 3.7 | LOW \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T10:28:49.000000Z"}, {"uuid": "d6b77c6b-92b5-4287-ad1b-11318ba3104e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3503", "type": "seen", "source": "https://t.me/cvedetector/24198", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3503 - \"WP Maps Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-3503 \nPublished : May 1, 2025, 6:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The WP Maps  WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T10:39:11.000000Z"}, {"uuid": "76df7b8d-d7b0-4ef1-91bc-99f493eb9229", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3502", "type": "seen", "source": "https://t.me/cvedetector/24197", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3502 - WP Maps Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3502 \nPublished : May 1, 2025, 6:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The WP Maps  WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T10:39:10.000000Z"}, {"uuid": "bc09f2fe-c89c-47b4-95cc-96de5fd6b6da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3504", "type": "seen", "source": "https://t.me/cvedetector/24194", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3504 - WP Maps Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3504 \nPublished : May 1, 2025, 6:15 a.m. | 1\u00a0hour, 56\u00a0minutes ago \nDescription : The WP Maps  WordPress plugin before 4.7.2 does not sanitise and escape some of its Map settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T10:39:08.000000Z"}, {"uuid": "3077d114-db47-4c8e-9b09-f1074cdef529", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3521", "type": "seen", "source": "https://t.me/cvedetector/24191", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3521 - \"WordPress Team Members Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2025-3521 \nPublished : May 1, 2025, 7:15 a.m. | 56\u00a0minutes ago \nDescription : The Team Members \u2013 Best WordPress Team Plugin with Team Slider, Team Showcase & Team Builder plugin for WordPress is vulnerable to Stored Cross-Site Scripting via Social Link icons in all versions up to, and including, 3.4.0 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers, with Contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T10:39:03.000000Z"}, {"uuid": "978f8d26-ecc6-48c1-9d85-2c6977d82c20", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3599", "type": "seen", "source": "https://t.me/cvedetector/24129", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3599 - Symantec Endpoint Protection ERASER Engine Elevation of Privilege Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3599 \nPublished : April 30, 2025, 5:15 p.m. | 37\u00a0minutes ago \nDescription : Symantec Endpoint Protection Windows Agent, running an ERASER Engine prior to 119.1.7.8, may be susceptible to an Elevation of Privilege vulnerability, which may allow an attacker to delete resources that are normally protected from an application or user. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T20:25:46.000000Z"}, {"uuid": "dd15fdc2-f7a5-4e4d-a66d-08facd146717", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3501", "type": "seen", "source": "https://t.me/cvedetector/24056", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3501 - Keycloak Certificate Verification Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-3501 \nPublished : April 29, 2025, 9:15 p.m. | 1\u00a0hour, 51\u00a0minutes ago \nDescription : A flaw was found in Keycloak. By setting a verification policy to 'ALL', the trust store certificate verification is skipped, which is unintended. \nSeverity: 8.2 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"30 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-30T01:11:55.000000Z"}, {"uuid": "d2d80166-37fe-46e8-b2d6-e6ee6834d23c", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3534", "type": "seen", "source": "https://t.me/cvedetector/22809", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3534 - PowerCreator CMS SQL Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3534 \nPublished : April 13, 2025, 11:15 a.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in PowerCreator CMS 1.0. Affected is an unknown function of the file /OpenPublicCourse.aspx. The manipulation of the argument cid leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T16:05:22.000000Z"}, {"uuid": "49b003e7-521a-4348-9950-8fd5728d6ff0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3535", "type": "seen", "source": "https://t.me/cvedetector/22808", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3535 - Shuanx BurpAPIFinder Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3535 \nPublished : April 13, 2025, 11:15 a.m. | 2\u00a0hours, 14\u00a0minutes ago \nDescription : A vulnerability has been found in shuanx BurpAPIFinder up to 2.0.2 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file BurpApiFinder.db. The manipulation leads to denial of service. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T16:05:22.000000Z"}, {"uuid": "2ef9c79d-e802-47c4-91e0-877764d9abd3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3512", "type": "seen", "source": "https://t.me/cvedetector/22724", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3512 - Qt QTextMarkdownImporter Heap-based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-3512 \nPublished : April 11, 2025, 8:15 a.m. | 1\u00a0hour, 11\u00a0minutes ago \nDescription : There is a Heap-based Buffer Overflow vulnerability in QTextMarkdownImporter. This requires an incorrectly formatted markdown file to be passed to QTextMarkdownImporter to trigger the overflow.This issue affects Qt from 6.8.0 to 6.8.4. Versions up to 6.6.0 are known to be unaffected, and the fix is in 6.8.4 and later. \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"11 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-11T12:16:16.000000Z"}, {"uuid": "67c7cc4b-9c38-4611-8fca-2c9ae12c35a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3548", "type": "seen", "source": "https://t.me/cvedetector/22821", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3548 - \"Assimp Heap-Based Buffer Overflow Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-3548 \nPublished : April 14, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in Open Asset Import Library Assimp up to 5.4.3. This issue affects the function aiString::Set in the library include/assimp/types.h of the component File Handler. The manipulation leads to heap-based buffer overflow. It is possible to launch the attack on the local host. The exploit has been disclosed to the public and may be used. It is recommended to apply a patch to fix this issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T06:17:58.000000Z"}, {"uuid": "77046b6a-882d-4e66-8f61-75cc74ad2b72", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3547", "type": "seen", "source": "https://t.me/cvedetector/22820", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3547 - Frdel Agent-Zero Path Traversal Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3547 \nPublished : April 14, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in frdel Agent-Zero 0.8.1.2. This vulnerability affects unknown code of the file /get_work_dir_files. The manipulation of the argument path leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T06:17:57.000000Z"}, {"uuid": "c3ffe685-5339-4f52-9929-ffd3ecb32eb5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3572", "type": "seen", "source": "https://t.me/cvedetector/22819", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3572 - SmartRobot from INTUMIT SSRF Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3572 \nPublished : April 14, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : SmartRobot from INTUMIT has a Server-Side Request Forgery vulnerability, allowing unauthenticated remote attackers to probe internal network and even access arbitrary local files on the server. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T06:17:35.000000Z"}, {"uuid": "331219ee-1a8e-4971-972a-99e50bda33e3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3542", "type": "seen", "source": "https://t.me/cvedetector/22818", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3542 - H3C Magic NX15, Magic NX400 and Magic R3010 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3542 \nPublished : April 14, 2025, 12:15 a.m. | 1\u00a0hour, 49\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in H3C Magic NX15, Magic NX400 and Magic R3010 up to V100R014. This affects the function FCGI_WizardProtoProcess of the file /api/wizard/getsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T04:37:19.000000Z"}, {"uuid": "e00dea2f-3dcb-48bb-9a1a-d1c83eb4001a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3543", "type": "seen", "source": "https://t.me/cvedetector/22817", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3543 - H3C Magic NX Series HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3543 \nPublished : April 14, 2025, 1:15 a.m. | 49\u00a0minutes ago \nDescription : A vulnerability has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014 and classified as critical. This vulnerability affects the function FCGI_WizardProtoProcess of the file /api/wizard/setsyncpppoecfg of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T04:37:19.000000Z"}, {"uuid": "c0ef6ed5-5c71-4e9c-a28f-12fa31a12c75", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3544", "type": "seen", "source": "https://t.me/cvedetector/22816", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3544 - H3C Magic NX15/30 Pro/400/BE18000 HTTP POST Request Handler Command Injection\", \n  \"Content\": \"CVE ID : CVE-2025-3544 \nPublished : April 14, 2025, 1:15 a.m. | 49\u00a0minutes ago \nDescription : A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014 and classified as critical. This issue affects the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getCapabilityWeb of the component HTTP POST Request Handler. The manipulation leads to command injection. Access to the local network is required for this attack to succeed. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T04:37:18.000000Z"}, {"uuid": "a1624346-e864-4518-97af-45aaeaef06b7", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3550", "type": "seen", "source": "https://t.me/cvedetector/22826", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3550 - Wowjoy Internet Doctor Workstation System Remote Authorization Bypass\", \n  \"Content\": \"CVE ID : CVE-2025-3550 \nPublished : April 14, 2025, 4:15 a.m. | 2\u00a0hours ago \nDescription : A vulnerability has been found in wowjoy \u6d59\u6c5f\u6e56\u5dde\u534e\u5353\u4fe1\u606f\u79d1\u6280\u6709\u9650\u516c\u53f8 Internet Doctor Workstation System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality of the file /v1/pushConfig/detail/. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T08:48:29.000000Z"}, {"uuid": "445579a4-aa6e-429e-8507-35853002a507", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3551", "type": "seen", "source": "https://t.me/cvedetector/22825", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3551 - Lingxing ERP Unrestricted File Upload Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3551 \nPublished : April 14, 2025, 5:15 a.m. | 1\u00a0hour ago \nDescription : A vulnerability was found in Lingxing ERP 2 and classified as critical. Affected by this issue is the function DoUpload of the file /Api/FileUpload.ashx?method=DoUpload. The manipulation of the argument File leads to unrestricted upload. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 7.3 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T08:48:28.000000Z"}, {"uuid": "b20973e3-084a-47b1-85bc-3d7b44d62128", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3546", "type": "seen", "source": "https://t.me/cvedetector/22824", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3546 - H3C Magic NX15/Business Ethernet Switch HTTP Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3546 \nPublished : April 14, 2025, 2:15 a.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been declared as critical. Affected by this vulnerability is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getLanguage of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T06:18:00.000000Z"}, {"uuid": "882cfa61-4365-44ca-8a92-2e5b4e77472b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3545", "type": "seen", "source": "https://t.me/cvedetector/22823", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3545 - H3C Magic NX Series HTTP POST Request Handler Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3545 \nPublished : April 14, 2025, 2:15 a.m. | 1\u00a0hour, 58\u00a0minutes ago \nDescription : A vulnerability was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. It has been classified as critical. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/setLanguage of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T06:17:59.000000Z"}, {"uuid": "5f4b6388-bc47-4a2f-b878-1f44d626c9d4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3549", "type": "seen", "source": "https://t.me/cvedetector/22822", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3549 - Assimp Heap-Based Buffer Overflow Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3549 \nPublished : April 14, 2025, 3:15 a.m. | 58\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, was found in Open Asset Import Library Assimp 5.4.3. Affected is the function Assimp::MD3Importer::ValidateSurfaceHeaderOffsets of the file code/AssetLib/MD3/MD3Loader.cpp of the component File Handler. The manipulation leads to heap-based buffer overflow. The attack needs to be approached locally. The exploit has been disclosed to the public and may be used. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T06:17:58.000000Z"}, {"uuid": "354fd031-d9a3-46a4-a8c3-58e87b4474a6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3533", "type": "seen", "source": "https://t.me/cvedetector/22804", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3533 - YouDianCMS Cross Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3533 \nPublished : April 13, 2025, 10:15 a.m. | 1\u00a0hour, 4\u00a0minutes ago \nDescription : A vulnerability, which was classified as problematic, has been found in YouDianCMS 9.5.21. This issue affects some unknown processing of the file /App/Tpl/Admin/Default/Channel/index.html.Attackers. The manipulation of the argument Parent leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T13:34:53.000000Z"}, {"uuid": "e7d4becf-4f8f-49e2-b5dd-08a9be05e200", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3531", "type": "seen", "source": "https://t.me/cvedetector/22803", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3531 - YouDianCMS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3531 \nPublished : April 13, 2025, 6:15 a.m. | 49\u00a0minutes ago \nDescription : A vulnerability classified as problematic has been found in YouDianCMS 9.5.21. This affects an unknown part of the file /App/Tpl/Admin/Default/Log/index.html. The manipulation of the argument UserName/LogType leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T09:24:00.000000Z"}, {"uuid": "f50efcb0-0d91-40fb-a09d-9551f5f7ffa8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3532", "type": "seen", "source": "https://t.me/cvedetector/22802", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3532 - YouDianCMS Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3532 \nPublished : April 13, 2025, 6:15 a.m. | 49\u00a0minutes ago \nDescription : A vulnerability classified as problematic was found in YouDianCMS 9.5.21. This vulnerability affects unknown code of the file /App/Tpl/Member/Default/Order/index.html.Attackers. The manipulation of the argument OrderNumber leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 4.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T09:24:00.000000Z"}, {"uuid": "e061cf94-3fb1-4e2f-aeab-489274bdf3c2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3539", "type": "seen", "source": "https://t.me/cvedetector/22814", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3539 - H3C Magic NX Series HCF CGI Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3539 \nPublished : April 13, 2025, 10:15 p.m. | 1\u00a0hour, 40\u00a0minutes ago \nDescription : A vulnerability classified as critical has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400, Magic R3010 and Magic BE18000 up to V100R014. Affected is the function FCGI_CheckStringIfContainsSemicolon of the file /api/wizard/getBasicInfo of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T02:06:55.000000Z"}, {"uuid": "8d35434d-baf9-4c66-825e-8a2071a6dd92", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3540", "type": "seen", "source": "https://t.me/cvedetector/22813", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3540 - H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3540 \nPublished : April 13, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability classified as critical was found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this vulnerability is the function FCGI_WizardProtoProcess of the file /api/wizard/getCapability of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack can only be initiated within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T02:06:54.000000Z"}, {"uuid": "7b40766f-8c3c-43b2-bc90-1c4291b1ba50", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3541", "type": "seen", "source": "https://t.me/cvedetector/22812", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3541 - H3C Magic NX15/Magic NX30 Pro/Magic NX400/Magic R3010 Command Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3541 \nPublished : April 13, 2025, 11:15 p.m. | 40\u00a0minutes ago \nDescription : A vulnerability, which was classified as critical, has been found in H3C Magic NX15, Magic NX30 Pro, Magic NX400 and Magic R3010 up to V100R014. Affected by this issue is the function FCGI_WizardProtoProcess of the file /api/wizard/getSpecs of the component HTTP POST Request Handler. The manipulation leads to command injection. The attack needs to be done within the local network. The exploit has been disclosed to the public and may be used. It is recommended to upgrade the affected component. \nSeverity: 8.0 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"14 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-14T02:06:54.000000Z"}, {"uuid": "3b6f80f8-3587-433a-9b1e-c4a60db271e8", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "seen", "source": "https://t.me/cvedetector/22811", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3538 - D-Link jhttpd Auth Asp Stack-Based Buffer Overflow\", \n  \"Content\": \"CVE ID : CVE-2025-3538 \nPublished : April 13, 2025, 7:15 p.m. | 27\u00a0minutes ago \nDescription : A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used. \nSeverity: 8.8 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T21:56:11.000000Z"}, {"uuid": "f35279bc-0998-4718-a286-7c577eb54552", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3536", "type": "seen", "source": "https://t.me/cvedetector/22806", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3536 - Tutorials-Website Employee Management System Remote File Inclusion Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3536 \nPublished : April 13, 2025, 12:15 p.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : A vulnerability was found in Tutorials-Website Employee Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/delete-user.php. The manipulation of the argument ID leads to improper authorization. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 6.5 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T16:05:20.000000Z"}, {"uuid": "9ae8bdf2-8126-410d-abbd-9de81769dd58", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3537", "type": "seen", "source": "https://t.me/cvedetector/22805", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3537 - Tutorials-Website Employee Management System Remote Unauthorized File Access Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3537 \nPublished : April 13, 2025, 12:15 p.m. | 1\u00a0hour, 14\u00a0minutes ago \nDescription : A vulnerability was found in Tutorials-Website Employee Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/update-user.php. The manipulation of the argument ID leads to improper authorization. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The vendor was contacted early about this disclosure but did not respond in any way. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"13 Apr 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-04-13T16:05:20.000000Z"}, {"uuid": "f2f3148f-b00e-432c-887d-d4ba0b49d9f1", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "published-proof-of-concept", "source": "https://t.me/TheDarkWebInformer/16042", "content": "\ud83d\udd17 DarkWebInformer.com - Cyber Threat Intelligence\n\ud83d\udccc CVE ID: CVE-2025-3538\n\ud83d\udd25 CVSS Score: 8.7 (cvssV4_0, Vector: CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N)\n\ud83d\udd39 Description: A vulnerability was found in D-Link DI-8100 16.07.26A1. It has been rated as critical. This issue affects the function auth_asp of the file /auth.asp of the component jhttpd. The manipulation of the argument callback leads to stack-based buffer overflow. The attack needs to be approached within the local network. The exploit has been disclosed to the public and may be used.\n\ud83d\udccf Published: 2025-04-13T18:31:05.124Z\n\ud83d\udccf Modified: 2025-04-13T18:31:05.124Z\n\ud83d\udd17 References:\n1. https://vuldb.com/?id.304577\n2. https://vuldb.com/?ctiid.304577\n3. https://vuldb.com/?submit.524224\n4. https://github.com/Fizz-L/CVE1/blob/main/DI-8100Command%20execution2.md\n5. https://www.dlink.com/", "creation_timestamp": "2025-04-14T01:06:10.000000Z"}, {"uuid": "d241159d-ece9-4e76-966b-e2c04cdb0dd2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3540", "type": "published-proof-of-concept", "source": "Telegram/80p0HBbxIuMCnJXXwbQ8Rxrn7NGt2LIgxUq7ng1-y89SiJA", "content": "", "creation_timestamp": "2025-04-14T01:31:07.000000Z"}, {"uuid": "59f9b759-d821-4d23-9531-ca97b30a479e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3519", "type": "seen", "source": "Telegram/Fkk7fCFf__vxcN9yUdFFxPMM1IoLmdN1KJ3VKQ-hEiFiNXA", "content": "", "creation_timestamp": "2025-04-22T12:00:38.000000Z"}, {"uuid": "93008154-7361-46d4-875d-6ce60892a9fc", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "Telegram/Ks6qwMM846ZBa1VM-XCj0EKF7xoM9nmHWWF6_OnnPr3BMjo", "content": "", "creation_timestamp": "2025-04-17T17:00:09.000000Z"}, {"uuid": "42165fc3-631a-48a2-ad2c-a540de6a36fe", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3541", "type": "published-proof-of-concept", "source": "Telegram/80p0HBbxIuMCnJXXwbQ8Rxrn7NGt2LIgxUq7ng1-y89SiJA", "content": "", "creation_timestamp": "2025-04-14T01:31:07.000000Z"}, {"uuid": "8a7ff3d1-9358-4f5a-8386-b1793ec7967b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3538", "type": "published-proof-of-concept", "source": "Telegram/GXOwqFcPgf4Zzg10JgPNfkALwW7SJkBCdDuJgZG6jk85Wrc", "content": "", "creation_timestamp": "2025-04-13T21:30:32.000000Z"}, {"uuid": "6ee3633e-6189-42c9-aa7c-d812430cce91", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3578", "type": "seen", "source": "Telegram/E8pU4OK_BqdPj2olmKcC8HhvLzrILjQ74eWGXkoWdIjgDWU", "content": "", "creation_timestamp": "2025-04-15T11:00:22.000000Z"}, {"uuid": "6cdba390-2f26-4189-bc7e-f66baabe61dd", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3520", "type": "seen", "source": "Telegram/hKF1SHZJUyQcX0icuRLCHIAOgKKgFUIBghnikgdeF8df4Pg", "content": "", "creation_timestamp": "2025-04-18T04:00:19.000000Z"}, {"uuid": "4c3cf269-c7a7-4cc3-a736-595604820c31", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3574", "type": "seen", "source": "Telegram/p3dOqAKCX1N8voar_p4buM_6tUI75kV6N-doMergTPyUUjU", "content": "", "creation_timestamp": "2025-04-15T12:01:16.000000Z"}, {"uuid": "f5f6b7f7-1778-42b1-bc5a-3ce50065e8f6", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3575", "type": "seen", "source": "Telegram/p3dOqAKCX1N8voar_p4buM_6tUI75kV6N-doMergTPyUUjU", "content": "", "creation_timestamp": "2025-04-15T12:01:16.000000Z"}, {"uuid": "edfeae12-b7b9-478a-b822-74caabcc398b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3579", "type": "seen", "source": "Telegram/p3dOqAKCX1N8voar_p4buM_6tUI75kV6N-doMergTPyUUjU", "content": "", "creation_timestamp": "2025-04-15T12:01:16.000000Z"}, {"uuid": "fa93e6a3-dbdf-4081-835a-96d72aa321da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "published-proof-of-concept", "source": "Telegram/L3qHfVp5x1avwO8pxBTf9bu-HT60-x98hU6VVbkjPley9dQ", "content": "", "creation_timestamp": "2025-04-18T09:00:07.000000Z"}, {"uuid": "b6297072-4396-43a0-9637-95f1625942af", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3566", "type": "published-proof-of-concept", "source": "Telegram/b6TwT_8CrTMi0UrhZjaAmraDGhi6JYjQcWQBxOdOPMY2F88", "content": "", "creation_timestamp": "2025-04-14T15:30:19.000000Z"}, {"uuid": "a9469086-5386-4778-bd11-afda7ad141da", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3552", "type": "published-proof-of-concept", "source": "Telegram/AnzRbjaauNcMW5UCHn1mxJ_vzQI1EZ0cRQhyQJqD-AGynTI", "content": "", "creation_timestamp": "2025-04-14T08:30:23.000000Z"}, {"uuid": "14c551ea-2c12-453a-9e17-6d464a34d690", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3551", "type": "published-proof-of-concept", "source": "Telegram/w1m0cKfYEhxQnGhVuITWzn4cCAxqWt-VkJN0i_K5ubtFtQ8", "content": "", "creation_timestamp": "2025-04-14T07:30:28.000000Z"}, {"uuid": "4b8117ae-6c29-4f28-9eb6-f36c58a98f55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3572", "type": "seen", "source": "Telegram/egwfazapRWav_jx9LjYRJnZIUpq7wdeRdkU_x_WPpSsP7VQ", "content": "", "creation_timestamp": "2025-04-14T05:30:17.000000Z"}, {"uuid": "dbee9265-0ee4-41e8-8cd1-f50fa52c3729", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3545", "type": "published-proof-of-concept", "source": "Telegram/-zpsZTginSm6urW0YFc1V3SpAtk0fQmnoKiSqQuoZgGOs1U", "content": "", "creation_timestamp": "2025-04-14T04:30:26.000000Z"}, {"uuid": "8e85119f-67e1-47e8-abd8-fbde408d1b64", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3546", "type": "published-proof-of-concept", "source": "Telegram/-zpsZTginSm6urW0YFc1V3SpAtk0fQmnoKiSqQuoZgGOs1U", "content": "", "creation_timestamp": "2025-04-14T04:30:26.000000Z"}, {"uuid": "614adf26-572f-4c75-9b97-e6b011017059", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3544", "type": "published-proof-of-concept", "source": "Telegram/KavubF3xKRSByKw1cZTuFpB4MYupBgqytnsAVKaza3iLUwc", "content": "", "creation_timestamp": "2025-04-14T03:30:38.000000Z"}, {"uuid": "0561352c-485c-4aa2-9eb7-93d13335696b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3543", "type": "published-proof-of-concept", "source": "Telegram/KavubF3xKRSByKw1cZTuFpB4MYupBgqytnsAVKaza3iLUwc", "content": "", "creation_timestamp": "2025-04-14T03:30:38.000000Z"}, {"uuid": "c5ba0456-ba25-43dd-875d-fcca0b21401f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3542", "type": "published-proof-of-concept", "source": "Telegram/XRl38GbZbOIrZrGNoBMxHk1w1Gr7KvaeuKvQBnlail6D0YM", "content": "", "creation_timestamp": "2025-04-14T02:30:17.000000Z"}, {"uuid": "afbf295b-fb5c-4a51-960e-d75d8b72bdd0", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3539", "type": "published-proof-of-concept", "source": "Telegram/c1q-GHFte0g8fMrLmCmqUtF4vGKyA9_I0no24eNdY1lyP1o", "content": "", "creation_timestamp": "2025-04-14T00:31:01.000000Z"}, {"uuid": "50136d5d-3280-481d-95da-fcff7956a225", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35996", "type": "published-proof-of-concept", "source": "Telegram/0EwG4WR3r_yD8YYpC8nymf37rvRJ9lNf57cFzRcn8wtN8JQ", "content": "", "creation_timestamp": "2025-05-01T22:01:57.000000Z"}, {"uuid": "d1d03539-7537-4bf0-9908-3350d8a708f9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35975", "type": "seen", "source": "Telegram/h5sjG5GrTkIVK0KP-Zeb-XVGVHy1vwa2ngZ84vEqUPJKDmU", "content": "", "creation_timestamp": "2025-05-01T21:02:21.000000Z"}, {"uuid": "36905015-e081-4a1f-aaaa-63356775b8e5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "seen", "source": "https://t.me/cvedetector/24784", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-35939 - Craft CMS Unauthenticated Session File Injection Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-35939 \nPublished : May 7, 2025, 11:15 p.m. | 1\u00a0hour, 39\u00a0minutes ago \nDescription : Craft CMS stores arbitrary content provided by unauthenticated users in session files. This content could be accessed and executed, possibly using an independent vulnerability. Craft CMS redirects requests that require authentication to the login page and generates a session file on the server at `/var/lib/php/sessions`. Such session files are named `sess_[session_value]`, where `[session_value]` is provided to the client in a `Set-Cookie` response header. Craft CMS stores the return URL requested by the client without sanitizing parameters. Consequently, an unauthenticated client can introduce arbitrary values, such as PHP code, to a known local file location on the server. Craft CMS versions 5.7.5 and 4.15.3 have been released to address this issue. \nSeverity: 5.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T03:23:24.000000Z"}, {"uuid": "747d0cab-0353-4176-8877-94b3e7ee4a8b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3510", "type": "seen", "source": "https://t.me/cvedetector/24316", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3510 - TagDiv Composer WordPress Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3510 \nPublished : May 2, 2025, 4:15 a.m. | 33\u00a0minutes ago \nDescription : The tagDiv Composer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via multiple shortcodes in all versions up to, and including, 5.4 due to insufficient input sanitization and output escaping on user supplied attributes. This makes it possible for authenticated attackers, with contributor-level access and above, to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. \nSeverity: 6.4 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T07:34:41.000000Z"}, {"uuid": "18e3f107-56f2-48eb-af35-9f44a78b2e90", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3514", "type": "seen", "source": "https://t.me/cvedetector/24332", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3514 - \"SureForms WordPress Stored Cross-Site Scripting Vulnerability\"\", \n  \"Content\": \"CVE ID : CVE-2025-3514 \nPublished : May 2, 2025, 6:15 a.m. | 37\u00a0minutes ago \nDescription : The SureForms  WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T09:15:13.000000Z"}, {"uuid": "25ea4ad5-e89b-409a-9f95-b67205c2cd54", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3583", "type": "seen", "source": "https://t.me/cvedetector/24441", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3583 - WordPress Newsletter Stored Cross-Site Scripting Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-3583 \nPublished : May 5, 2025, 6:15 a.m. | 58\u00a0minutes ago \nDescription : The Newsletter  WordPress plugin before 8.7.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"05 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-05T10:01:24.000000Z"}, {"uuid": "25ee1e7c-5e97-4a24-8367-e95009998405", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35996", "type": "seen", "source": "https://t.me/cvedetector/24277", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-35996 - KUNBUS PiCtory Stored Cross-Site Scripting (XSS)\", \n  \"Content\": \"CVE ID : CVE-2025-35996 \nPublished : May 1, 2025, 7:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : KUNBUS PiCtory version 2.11.1 and earlier are vulnerable when an authenticated remote attacker crafts a special filename that can be stored by API endpoints. That filename is later transmitted to the client in order to show a list of configuration files. Due to a missing escape or sanitization, the filename could be executed as HTML script tag resulting in a cross-site-scripting attack. \nSeverity: 9.0 | CRITICAL \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:46.000000Z"}, {"uuid": "3da683b3-5e59-4dd3-be62-b28e357aeb34", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3517", "type": "seen", "source": "https://t.me/cvedetector/24280", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3517 - Devolutions Server PAM JIT Privilege Escalation\", \n  \"Content\": \"CVE ID : CVE-2025-3517 \nPublished : May 1, 2025, 7:15 p.m. | 1\u00a0hour, 20\u00a0minutes ago \nDescription : Privilege context switching error in PAM JIT feature in Devolutions Server 2025.1.5.0 and earlier allows a PAM JIT account password to be improperly reset after usage via specific actions such as editing the username. \nSeverity: 6.3 | MEDIUM \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"01 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-01T23:12:51.000000Z"}, {"uuid": "576df840-2118-47a3-a14c-812a7019fc94", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3513", "type": "seen", "source": "https://t.me/cvedetector/24335", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-3513 - \"SureForms WordPress Stored Cross-Site Scripting\"\", \n  \"Content\": \"CVE ID : CVE-2025-3513 \nPublished : May 2, 2025, 6:15 a.m. | 37\u00a0minutes ago \nDescription : The SureForms  WordPress plugin before 1.4.4 does not sanitise and escape some of its Form settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup). \nSeverity: 0.0 | NA \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"02 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-02T09:15:16.000000Z"}, {"uuid": "5a36fc6e-84a0-446f-9aaf-108b8888eb84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35995", "type": "seen", "source": "https://t.me/cvedetector/24775", "content": "{\n  \"Source\": \"CVE FEED\",\n  \"Title\": \"CVE-2025-35995 - BIG-IP PEM Denial of Service Vulnerability\", \n  \"Content\": \"CVE ID : CVE-2025-35995 \nPublished : May 7, 2025, 10:15 p.m. | 29\u00a0minutes ago \nDescription : When a BIG-IP PEM system is licensed with URL categorization, and the URL categorization policy or an iRule with the urlcat\u00a0command is enabled on a virtual server, undisclosed requests can cause the Traffic Management Microkernel (TMM) to terminate.\u00a0Note: Software versions which have reached End of Technical Support (EoTS) are not evaluated. \nSeverity: 7.5 | HIGH \nVisit the link for more details, such as CVSS details, affected products, timeline, and more...\",\n  \"Detection Date\": \"08 May 2025\",\n  \"Type\": \"Vulnerability\"\n}\n\ud83d\udd39 t.me/cvedetector \ud83d\udd39", "creation_timestamp": "2025-05-08T00:52:51.000000Z"}, {"uuid": "b6602ee3-3baf-4312-bb38-2e81004af76f", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3576", "type": "seen", "source": "https://www.cisa.gov/news-events/ics-advisories/icsa-26-134-16", "content": "View CSAF\n\nSummary\n\nRuggedcom Rox before v2.17.1 contain multiple third-party vulnerabilities. Siemens has released new versions for the affected products and recommends to update to the latest versions.\n\nThe following versions of Siemens Ruggedcom Rox are affected:\n\n\n\nRUGGEDCOM ROX MX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX MX5000RE vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1400 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1500 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1501 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1510 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1511 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1512 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1524 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX1536 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\nRUGGEDCOM ROX RX5000 vers:intdot/<2.17.1 (CVE-2019-13103, CVE-2019-13104, CVE-2019-13106, CVE-2019-14192, CVE-2019-14193, CVE-2019-14194, CVE-2019-14195, CVE-2019-14196, CVE-2019-14197, CVE-2019-14198, CVE-2019-14199, CVE-2019-14200, CVE-2019-14201, CVE-2019-14202, CVE-2019-14203, CVE-2019-14204, CVE-2020-10648, CVE-2022-2347, CVE-2022-30552, CVE-2022-30790, CVE-2022-34835, CVE-2023-3019, CVE-2023-27043, CVE-2024-3447, CVE-2024-22365, CVE-2024-57256, CVE-2024-57258, CVE-2025-0395, CVE-2025-3576, CVE-2025-6020, CVE-2025-7425, CVE-2025-9714, CVE-2025-46836, CVE-2025-49794, CVE-2025-49796)\n\n<div class=\"csaf-table\">\n\n\n\n\nCVSS\nVendor\nEquipment\nVulnerabilities\n\n\n\n\nv3 9.8\nSiemens\nSiemens Ruggedcom Rox\nUncontrolled Recursion, Integer Underflow (Wrap or Wraparound), Out-of-bounds Write, Out-of-bounds Read, Improper Input Validation, Heap-based Buffer Overflow, Buffer Copy without Checking Size of Input ('Classic Buffer Overflow'), Use After Free, Improper Validation of Syntactic Correctness of Input, Improper Control of a Resource Through its Lifetime, Integer Overflow or Wraparound, Incorrect Calculation of Buffer Size, Use of Weak Hash, Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'), Stack-based Buffer Overflow, Expired Pointer Dereference\n\n\n\n</div>\n\nBackground\n\n\n\nCritical Infrastructure Sectors: Critical Manufacturing\n\nCountries/Areas Deployed: Worldwide\n\nCompany Headquarters Location: Germany\n\n\n\n\nVulnerabilities\n<div class=\"csaf-accordion\">\n\nExpand All +\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13103\n<div class=\"csaf-accordion-content\">\n\nA crafted self-referential DOS partition table will cause all Das U-Boot versions through 2019.07-rc4 to infinitely recurse, causing the stack to grow infinitely and eventually either crash or overwrite other data.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13104\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot versions 2016.11-rc1 through 2019.07-rc4, an underflow can cause memcpy() to overwrite a very large amount of data (including the whole stack) while reading a crafted ext4 filesystem.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-13106\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot versions 2016.09 through 2019.07-rc4 can memset() too much data while reading a crafted ext4 filesystem, which results in a stack buffer overflow and likely code execution.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14192\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an nc_input_packet call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14193\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with an unvalidated length at nfs_readlink_reply, in the \"if\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14194\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv2 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14195\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with unvalidated length at nfs_readlink_reply in the \"else\" block after calculating the new path length.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14196\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14197\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a read of out-of-bounds data at nfs_read_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.0\n9.1\nCRITICAL\nCVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14198\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy with a failed length check at nfs_read_reply when calling store_block in the NFSv3 case.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14199\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is an unbounded memcpy when parsing a UDP packet due to a net_process_received_packet integer underflow during an *udp_packet_handler call.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-191 Integer Underflow (Wrap or Wraparound)\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14200\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: rpc_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14201\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_lookup_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14202\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_readlink_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14203\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_mount_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2019-14204\n<div class=\"csaf-accordion-content\">\n\nAn issue was discovered in Das U-Boot through 2019.07. There is a stack-based buffer overflow in this nfs_handler reply helper function: nfs_umountall_reply.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2020-10648\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot through 2020.01 allows attackers to bypass verified boot restrictions and subsequently boot arbitrary images by providing a crafted FIT image to a system configured to boot the default configuration.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-20 Improper Input Validation\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-2347\n<div class=\"csaf-accordion-content\">\n\nThere exists an unchecked length field in UBoot. The U-Boot DFU implementation does not bound the length field in USB DFU download setup packets, and it does not verify that the transfer direction corresponds to the specified command. Consequently, if a physical attacker crafts a USB DFU download setup packet with a `wLength` greater than 4096 bytes, they can write beyond the heap-allocated request buffer.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.7\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30552\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-120 Buffer Copy without Checking Size of Input ('Classic Buffer Overflow')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-30790\n<div class=\"csaf-accordion-content\">\n\nDas U-Boot 2022.01 has a Buffer Overflow, a different issue than CVE-2022-30552.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2022-34835\n<div class=\"csaf-accordion-content\">\n\nIn Das U-Boot through 2022.07-rc5, an integer signedness error and resultant stack-based buffer overflow in the \"i2c md\" command enables the corruption of the return address pointer of the do_i2c_md function.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-787 Out-of-bounds Write\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.8\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-3019\n<div class=\"csaf-accordion-content\">\n\nA DMA reentrancy issue leading to a use-after-free error was found in the e1000e NIC emulation code in QEMU. This issue could allow a privileged guest user to crash the QEMU process on the host, resulting in a denial of service.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2023-27043\n<div class=\"csaf-accordion-content\">\n\nThe email module of Python through 3.11.3 incorrectly parses e-mail addresses that contain a special character. The wrong portion of an RFC2822 header is identified as the value of the addr-spec. In some applications, an attacker can bypass a protection mechanism in which application access is granted only after verifying receipt of e-mail to a specific domain (e.g., only @company.example.com addresses may be used for signup). This occurs in email/_parseaddr.py in recent versions of Python.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-1286 Improper Validation of Syntactic Correctness of Input\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.3\nMEDIUM\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-3447\n<div class=\"csaf-accordion-content\">\n\nA heap-based buffer overflow was found in the SDHCI device emulation of QEMU. The bug is triggered when both `s->data_count` and the size of `s->fifo_buffer` are set to 0x200, leading to an out-of-bound access. A malicious guest could use this flaw to crash the QEMU process on the host, resulting in a denial of service condition.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-122 Heap-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-22365\n<div class=\"csaf-accordion-content\">\n\nlinux-pam (aka Linux PAM) before 1.6.0 allows attackers to cause a denial of service (blocked login process) via mkfifo because the openat call (for protect_dir) lacks O_DIRECTORY.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-664 Improper Control of a Resource Through its Lifetime\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.5\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57256\n<div class=\"csaf-accordion-content\">\n\nAn integer overflow in ext4fs_read_symlink in Das U-Boot before 2025.01-rc1 occurs for zalloc (adding one to an le32 variable) via a crafted ext4 filesystem with an inode size of 0xffffffff, resulting in a malloc of zero and resultant memory overwrite.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2024-57258\n<div class=\"csaf-accordion-content\">\n\nInteger overflows in memory allocation in Das U-Boot before 2025.01-rc1 occur for a crafted squashfs filesystem via sbrk, via request2size, or because ptrdiff_t is mishandled on x86_64.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-190 Integer Overflow or Wraparound\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.1\nHIGH\nCVSS:3.1/AV:P/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-0395\n<div class=\"csaf-accordion-content\">\n\nWhen the assert() function in the GNU C Library versions 2.13 to 2.40 fails, it does not allocate enough space for the assertion failure message string and size information, which may lead to a buffer overflow if the message string size aligns to page size.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-131 Incorrect Calculation of Buffer Size\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-3576\n<div class=\"csaf-accordion-content\">\n\nA vulnerability in the MIT Kerberos implementation allows GSSAPI-protected messages using RC4-HMAC-MD5 to be spoofed due to weaknesses in the MD5 checksum design. If RC4 is preferred over stronger encryption types, an attacker could exploit MD5 collisions to forge message integrity codes. This may lead to unauthorized message tampering.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-328 Use of Weak Hash\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n5.9\nMEDIUM\nCVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-6020\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in linux-pam. The module pam_namespace may use access user-controlled paths without proper protection, allowing local users to elevate their privileges to root via multiple symlink attacks and race conditions.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-7425\n<div class=\"csaf-accordion-content\">\n\nA flaw was found in libxslt where the attribute type, atype, flags are modified in a way that corrupts internal memory management. When XSLT functions, such as the key() process, result in tree fragments, this corruption prevents the proper cleanup of ID attributes. As a result, the system may access freed memory, causing crashes or enabling attackers to trigger heap corruption.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-416 Use After Free\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n7.8\nHIGH\nCVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:C/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-9714\n<div class=\"csaf-accordion-content\">\n\nUncontrolled recursion in XPath evaluation in libxml2 up to and including version 2.9.14 allows a local attacker to cause a stack overflow via crafted expressions. XPath processing functions `xmlXPathRunEval`, `xmlXPathCtxtCompile`, and `xmlXPathEvalExpr` were resetting recursion depth to zero before making potentially recursive calls. When such functions were called recursively this could allow for uncontrolled recursion and lead to a stack overflow. These functions now preserve recursion depth across recursive calls, allowing recursion depth to be controlled.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-674 Uncontrolled Recursion\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.2\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-46836\n<div class=\"csaf-accordion-content\">\n\nnet-tools is a collection of programs that form the base set of the NET-3 networking distribution for the Linux operating system. Inn versions up to and including 2.10, the Linux network utilities (like ifconfig) from the net-tools package do not properly validate the structure of /proc files when showing interfaces. `get_name()` in `interface.c` copies interface labels from `/proc/net/dev` into a fixed 16-byte stack buffer without bounds checking, leading to possible arbitrary code execution or crash. The known attack path does not require privilege but also does not provide privilege escalation in this scenario. A patch is available and expected to be part of version 2.20.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-121 Stack-based Buffer Overflow\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n6.6\nMEDIUM\nCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49794\n<div class=\"csaf-accordion-content\">\n\nA use-after-free vulnerability was found in libxml2. This issue occurs when parsing XPath elements under certain circumstances when the XML schematron has the schema elements. This flaw allows a malicious actor to craft a malicious XML document used as input for libxml, resulting in the program's crash using libxml or other possible undefined behaviors.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-825 Expired Pointer Dereference\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n<div class=\"csaf-accordion-item\">\n\nCVE-2025-49796\n<div class=\"csaf-accordion-content\">\n\nA vulnerability was found in libxml2. Processing certain sch:name elements from the input XML file can trigger a memory corruption issue. This flaw allows an attacker to craft a malicious XML input file that can lead libxml to crash, resulting in a denial of service or other possible undefined behavior due to sensitive data being corrupted in memory.\n\nView CVE Details\n\n\n\nAffected Products\n\nSiemens Ruggedcom Rox\n<div class=\"ics-vendor-version-status\">\n<div class=\"ics-vendor\">Vendor:Siemens</div>\n<div class=\"ics-version\">Product Version:RUGGEDCOM ROX MX5000, RUGGEDCOM ROX MX5000RE, RUGGEDCOM ROX RX1400, RUGGEDCOM ROX RX1500, RUGGEDCOM ROX RX1501, RUGGEDCOM ROX RX1510, RUGGEDCOM ROX RX1511, RUGGEDCOM ROX RX1512, RUGGEDCOM ROX RX1524, RUGGEDCOM ROX RX1536, RUGGEDCOM ROX RX5000</div>\n<div class=\"ics-status\">Product Status:known_affected</div>\n</div>\n<div class=\"ics-remediations\">\n\nRemediations\n\nVendor fixUpdate to V2.17.1 or later versionhttps://support.industry.siemens.com/cs/ww/en/view/110002017/\n</div>\n\nRelevant CWE: CWE-125 Out-of-bounds Read\n\n\n\nMetrics\n<div class=\"csaf-table csaf-metrics-table\">\n\n\n\n\nCVSS Version\nBase Score\nBase Severity\nVector String\n\n\n\n\n3.1\n9.1\nCRITICAL\nCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H\n\n\n\n</div>\n</div>\n</div>\n</div>\n\n\n\nAcknowledgments\n\n\n\nSiemens ProductCERT reported these vulnerabilities to CISA.\n\n\n\n\nGeneral Recommendations\n\nAs a general security measure, Siemens strongly recommends to protect network access to devices with appropriate mechanisms. In order to operate the devices in a protected IT environment, Siemens recommends to configure the environment according to Siemens' operational guidelines for Industrial Security (Download: https://www.siemens.com/cert/operational-guidelines-industrial-security), and to follow the recommendations in the product manuals. Additional information on Industrial Security by Siemens can be found at: https://www.siemens.com/industrialsecurity\n\n\n\nAdditional Resources\n\nFor further inquiries on security vulnerabilities in Siemens products and solutions, please contact the Siemens ProductCERT: https://www.siemens.com/cert/advisories\n\n\n\nTerms of Use\n\nThe use of Siemens Security Advisories is subject to the terms and conditions listed on: https://www.siemens.com/productcert/terms-of-use.\n\n\n\nLegal Notice and Terms of Use\n\nThis product is provided subject to this Notification (https://www.cisa.gov/notification) and this Privacy & Use policy (https://www.cisa.gov/privacy-policy).\n\n\n\nRecommended Practices\n\nCISA recommends users take defensive measures to minimize the exploitation risk of this vulnerability.\n\nMinimize network exposure for all control system devices and/or systems, and ensure they are not accessible from the internet.\n\nLocate control system networks and remote devices behind firewalls and isolate them from business networks.\n\nWhen remote access is required, use more secure methods, such as Virtual Private Networks (VPNs), recognizing VPNs may have vulnerabilities and should be updated to the most recent version available. Also recognize VPN is only as secure as its connected devices.\n\nCISA reminds organizations to perform proper impact analysis and risk assessment prior to deploying defensive measures.\n\nCISA also provides a section for control systems security recommended practices on the ICS webpage on cisa.gov. Several CISA products detailing cyber defense best practices are available for reading and download, including Improving Industrial Control Systems Cybersecurity with Defense-in-Depth Strategies.\n\nCISA encourages organizations to implement recommended cybersecurity strategies for proactive defense of ICS assets. Additional mitigation guidance and recommended practices are publicly available on the ICS webpage at cisa.gov in the technical information paper, ICS-TIP-12-146-01B--Targeted Cyber Intrusion Detection and Mitigation Strategies.\n\nOrganizations observing suspected malicious activity should follow established internal procedures and report findings to CISA for tracking and correlation against other incidents.\n\n\n\nAdvisory Conversion Disclaimer\n\nThis ICSA is a verbatim republication of Siemens ProductCERT SSA-577017 from a direct conversion of the vendor's Common Security Advisory Framework (CSAF) advisory. This is republished to CISA's website as a means of increasing visibility and is provided \"as-is\" for informational purposes only. CISA is not responsible for the editorial or technical accuracy of republished advisories and provides no warranties of any kind regarding any information contained within this advisory. Further, CISA does not endorse any commercial product or service. Please contact Siemens ProductCERT directly for any questions regarding this advisory.\n\nRevision History\n\n\n\nInitial Release Date: 2026-05-12\n\n\n\n\n\nDate\nRevision\nSummary\n\n\n\n\n2026-05-12\n1\nPublication Date\n\n\n2026-05-14\n2\nInitial CISA Republication of Siemens ProductCERT SSA-577017 advisory\n\n\n\n\n\n\nLegal Notice and Terms of Use", "creation_timestamp": "2026-05-14T10:00:00.000000Z"}, {"uuid": "9285ea1a-de88-4d2f-919d-6fec241b288d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3579", "type": "seen", "source": "https://t.me/purp_sec/516", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-56406 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Perl, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 tr/// \u0441 \u043d\u0435-ASCII \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043d\u0430 \u043b\u0435\u0432\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u0435. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a segmentation fault \u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445.\n\n\ud83d\udd35 CVE-2024-58136 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\u200b \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 'as behaviorName' => [...] \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u0430\u0441\u0441\u0438\u0432 \u0441 \u043a\u043b\u044e\u0447\u043e\u043c __class, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 PHP-\u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u0437\u043e\u0432\u0443 \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0431\u0430\u0433 \u0432 Meshtastic. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 mesh-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 protobuf. \u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-3102 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SureTriggers: All-in-One Automation Platform \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 secret_key \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 autheticate_user.\n\n\ud83d\udd35 CVE-2025-3579 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Aidex. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /api//message endpoint.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-14T16:00:18.238161Z"}, {"uuid": "7d703822-9e59-48a9-9458-44fdc4e9f4e1", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/9b4502f2-b6aa-4db5-ad8b-f46403e1231a", "content": "", "creation_timestamp": "2026-06-19T12:45:31.223182Z"}, {"uuid": "738f72e4-2901-4aa6-94c2-5224483c30ea", "vulnerability_lookup_origin": "caeb2787-0d58-4236-9039-7c86c3e566f3", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-35939", "type": "exploited", "source": "https://vulnerability.circl.lu/known-exploited-vulnerabilities-catalog/3b8bd11a-95c3-48a6-bad4-0277132851d3", "content": "", "creation_timestamp": "2026-06-23T14:03:56.015356Z"}, {"uuid": "613b24e4-f981-4a85-8664-00f1e16679df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3579", "type": "seen", "source": "https://t.me/purp_sec/516", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-56406 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Perl, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 tr/// \u0441 \u043d\u0435-ASCII \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043d\u0430 \u043b\u0435\u0432\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u0435. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a segmentation fault \u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445.\n\n\ud83d\udd35 CVE-2024-58136 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\u200b \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 'as behaviorName' => [...] \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u0430\u0441\u0441\u0438\u0432 \u0441 \u043a\u043b\u044e\u0447\u043e\u043c __class, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 PHP-\u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u0437\u043e\u0432\u0443 \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0431\u0430\u0433 \u0432 Meshtastic. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 mesh-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 protobuf. \u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-3102 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SureTriggers: All-in-One Automation Platform \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 secret_key \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 autheticate_user.\n\n\ud83d\udd35 CVE-2025-3579 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Aidex. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /api//message endpoint.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-15T00:00:37.542440Z"}, {"uuid": "8f2393c7-669b-458c-9505-d15b8ec6aa84", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3576", "type": "seen", "source": "https://bsky.app/profile/kriptabiz.bsky.social/post/3mphukqa63l2y", "content": "\u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c CVE-2025-3576 \u0432 MIT Kerberos: \u0443\u0433\u0440\u043e\u0437\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 GSSAPI \u0438 \u0441\u043f\u043e\u0441\u043e\u0431\u044b \u0437\u0430\u0449\u0438\u0442\u044b\n\n\n\nhttps://kripta.biz/posts/BF843ABE-F1C5-44EB-8BB3-55BDD37B50C5", "creation_timestamp": "2026-06-30T01:38:23.823308Z"}, {"uuid": "3f71e1c8-e0ef-4bc6-bbf3-b043989f0537", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3511", "type": "seen", "source": "https://bsky.app/profile/cyfar.ca/post/3mu7xgolx4c2g", "content": "~Cisa~\nCrafted UDP packets can remotely disrupt affected FA products; update firmware.\n-\nIOCs: CVE-2025-3511\n-\n#CVE20253511 #ICS #ThreatIntel", "creation_timestamp": "2026-08-29T13:14:29.226036Z"}, {"uuid": "5f0fcc50-b2af-4ad5-a9e3-91031842c84b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3579", "type": "seen", "source": "https://t.me/purp_sec/516", "content": "\u0421\u043e\u0431\u0440\u0430\u043b \u043d\u0435\u0441\u043a\u043e\u043b\u044c\u043a\u043e CVE, \u043d\u0430 \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0441\u0442\u043e\u0438\u0442 \u043e\u0431\u0440\u0430\u0442\u0438\u0442\u044c \u0432\u043d\u0438\u043c\u0430\u043d\u0438\u0435.\n\n\ud83d\udd35 CVE-2024-56406 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Perl, \u043f\u0440\u0435\u0434\u0441\u0442\u0430\u0432\u043b\u044f\u044e\u0449\u0430\u044f \u0441\u043e\u0431\u043e\u0439 \u043f\u0435\u0440\u0435\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u0435 \u0431\u0443\u0444\u0435\u0440\u0430 \u0432 \u043a\u0443\u0447\u0435, \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u044e\u0449\u0435\u0435 \u043f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u043e\u043f\u0435\u0440\u0430\u0442\u043e\u0440\u0430 tr/// \u0441 \u043d\u0435-ASCII \u0441\u0438\u043c\u0432\u043e\u043b\u0430\u043c\u0438 \u043d\u0430 \u043b\u0435\u0432\u043e\u0439 \u0441\u0442\u043e\u0440\u043e\u043d\u0435. \u041c\u043e\u0436\u0435\u0442 \u043f\u0440\u0438\u0432\u0435\u0441\u0442\u0438 \u043a segmentation fault \u0438 \u043a \u0432\u044b\u043f\u043e\u043b\u043d\u0435\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u043e\u0433\u043e \u043a\u043e\u0434\u0430 \u043d\u0430 \u0443\u044f\u0437\u0432\u0438\u043c\u044b\u0445 \u043f\u043b\u0430\u0442\u0444\u043e\u0440\u043c\u0430\u0445.\n\n\ud83d\udd35 CVE-2024-58136 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u043f\u0440\u043e\u0431\u043b\u0435\u043c\u0430 \u0431\u0435\u0437\u043e\u043f\u0430\u0441\u043d\u043e\u0441\u0442\u0438 \u0432 PHP-\u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a\u0435 Yii 2, \u043a\u043e\u0442\u043e\u0440\u0430\u044f \u0430\u043a\u0442\u0438\u0432\u043d\u043e \u044d\u043a\u0441\u043f\u043b\u0443\u0430\u0442\u0438\u0440\u0443\u0435\u0442\u0441\u044f \u0441 \u0444\u0435\u0432\u0440\u0430\u043b\u044f 2025 \u0433\u043e\u0434\u0430.\u200b \u041f\u0440\u0438 \u0438\u0441\u043f\u043e\u043b\u044c\u0437\u043e\u0432\u0430\u043d\u0438\u0438 \u0441\u0438\u043d\u0442\u0430\u043a\u0441\u0438\u0441\u0430 'as behaviorName' => [...] \u0444\u0440\u0435\u0439\u043c\u0432\u043e\u0440\u043a \u043c\u043e\u0436\u0435\u0442 \u0441\u043e\u0437\u0434\u0430\u0432\u0430\u0442\u044c \u043e\u0431\u044a\u0435\u043a\u0442\u044b \u043d\u0430 \u043e\u0441\u043d\u043e\u0432\u0435 \u043f\u0435\u0440\u0435\u0434\u0430\u043d\u043d\u044b\u0445 \u0434\u0430\u043d\u043d\u044b\u0445 \u0431\u0435\u0437 \u0434\u043e\u043b\u0436\u043d\u043e\u0439 \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u0442\u0438\u043f\u0430 \u0438\u043b\u0438 \u043a\u043e\u043d\u0444\u0438\u0433\u0443\u0440\u0430\u0446\u0438\u0438. \u0417\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a \u043c\u043e\u0436\u0435\u0442 \u043f\u0435\u0440\u0435\u0434\u0430\u0442\u044c \u0441\u043f\u0435\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0441\u0444\u043e\u0440\u043c\u0438\u0440\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u043c\u0430\u0441\u0441\u0438\u0432 \u0441 \u043a\u043b\u044e\u0447\u043e\u043c __class, \u0447\u0442\u043e \u043f\u0440\u0438\u0432\u0435\u0434\u0435\u0442 \u043a \u0441\u043e\u0437\u0434\u0430\u043d\u0438\u044e \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0445 PHP-\u043a\u043b\u0430\u0441\u0441\u043e\u0432 \u0441 \u043f\u043e\u0442\u0435\u043d\u0446\u0438\u0430\u043b\u044c\u043d\u043e \u0432\u0440\u0435\u0434\u043e\u043d\u043e\u0441\u043d\u044b\u043c\u0438 \u0430\u0440\u0433\u0443\u043c\u0435\u043d\u0442\u0430\u043c\u0438 \u043a\u043e\u043d\u0441\u0442\u0440\u0443\u043a\u0442\u043e\u0440\u0430 \u0438 \u0432\u044b\u0437\u043e\u0432\u0443 \u0438\u0445 \u043c\u0435\u0442\u043e\u0434\u043e\u0432.\n\n\ud83d\udd35 CVE-2025-24797 \u2014 \u0431\u0430\u0433 \u0432 Meshtastic. \u0417\u0430\u043a\u043b\u044e\u0447\u0430\u0435\u0442\u0441\u044f \u0432 \u043e\u0448\u0438\u0431\u043a\u0435 \u043f\u0440\u0438 \u043e\u0431\u0440\u0430\u0431\u043e\u0442\u043a\u0435 mesh-\u043f\u0430\u043a\u0435\u0442\u043e\u0432 \u0441 \u043d\u0435\u043a\u043e\u0440\u0440\u0435\u043a\u0442\u043d\u044b\u043c\u0438 \u0434\u0430\u043d\u043d\u044b\u043c\u0438 protobuf. \u041d\u0435\u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u0439 \u0430\u0442\u0430\u043a\u0443\u044e\u0449\u0438\u0439 \u043c\u043e\u0436\u0435\u0442 \u0432\u044b\u043f\u043e\u043b\u043d\u0438\u0442\u044c \u043f\u0440\u043e\u0438\u0437\u0432\u043e\u043b\u044c\u043d\u044b\u0439 \u043a\u043e\u0434 \u043d\u0430 \u0446\u0435\u043b\u0435\u0432\u044b\u0445 \u0443\u0441\u0442\u0440\u043e\u0439\u0441\u0442\u0432\u0430\u0445, \u043a\u043e\u0442\u043e\u0440\u044b\u0435 \u0440\u0435\u0442\u0440\u0430\u043d\u0441\u043b\u0438\u0440\u0443\u044e\u0442 \u043f\u0430\u043a\u0435\u0442\u044b \u043d\u0430 \u043a\u0430\u043d\u0430\u043b\u0435 \u043f\u043e \u0443\u043c\u043e\u043b\u0447\u0430\u043d\u0438\u044e.\n\n\ud83d\udd35 CVE-2025-3102 \u2014 \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 \u043f\u043b\u0430\u0433\u0438\u043d\u0435 SureTriggers: All-in-One Automation Platform \u0434\u043b\u044f WordPress. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u043e\u0431\u043e\u0439\u0442\u0438 \u0430\u0443\u0442\u0435\u043d\u0442\u0438\u0444\u0438\u043a\u0430\u0446\u0438\u044e \u0438 \u0441\u043e\u0437\u0434\u0430\u0442\u044c \u0443\u0447\u0435\u0442\u043d\u044b\u0435 \u0437\u0430\u043f\u0438\u0441\u0438 \u0430\u0434\u043c\u0438\u043d\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u043e\u0432. \u0423\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432\u043e\u0437\u043d\u0438\u043a\u0430\u0435\u0442 \u0438\u0437-\u0437\u0430 \u043e\u0442\u0441\u0443\u0442\u0441\u0442\u0432\u0438\u044f \u043f\u0440\u043e\u0432\u0435\u0440\u043a\u0438 \u043f\u0443\u0441\u0442\u043e\u0433\u043e \u0437\u043d\u0430\u0447\u0435\u043d\u0438\u044f \u043f\u0430\u0440\u0430\u043c\u0435\u0442\u0440\u0430 secret_key \u0432 \u0444\u0443\u043d\u043a\u0446\u0438\u0438 autheticate_user.\n\n\ud83d\udd35 CVE-2025-3579 \u2014 \u043a\u0440\u0438\u0442\u0438\u0447\u0435\u0441\u043a\u0430\u044f \u0443\u044f\u0437\u0432\u0438\u043c\u043e\u0441\u0442\u044c \u0432 Aidex. \u041f\u043e\u0437\u0432\u043e\u043b\u044f\u0435\u0442 \u0430\u0432\u0442\u043e\u0440\u0438\u0437\u043e\u0432\u0430\u043d\u043d\u044b\u043c \u0437\u043b\u043e\u0443\u043c\u044b\u0448\u043b\u0435\u043d\u043d\u0438\u043a\u0430\u043c \u0432\u044b\u043f\u043e\u043b\u043d\u044f\u0442\u044c \u043a\u043e\u043c\u0430\u043d\u0434\u044b \u0447\u0435\u0440\u0435\u0437 \u044d\u043d\u0434\u043f\u043e\u0438\u043d\u0442 /api//message endpoint.\n\n#blue_team #CVE_\u0434\u043d\u044f", "creation_timestamp": "2026-08-16T00:00:55.368425Z"}, {"uuid": "c379ca23-bb58-4d4e-b9e4-336b45b2f309", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "seen", "source": "https://t.me/breachdetector/856597", "content": "{\n  \"Source\": \"Darkforums[.]st\",\n  \"Content\": \"CVE-2025-3515 POC\", \n  \"author\": \"4NN4\",\n  \"Detection Date\": \"07 Sep 2025\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2026-07-15T10:00:05.035885Z"}, {"uuid": "d52e13d3-54e1-457f-af14-d1fc69d01d55", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "seen", "source": "https://t.me/breachdetector/856597", "content": "{\n  \"Source\": \"Darkforums[.]st\",\n  \"Content\": \"CVE-2025-3515 POC\", \n  \"author\": \"4NN4\",\n  \"Detection Date\": \"07 Sep 2025\",\n  \"Type\": \"Data leak\"\n}\n\ud83d\udd39 t.me/breachdetector \ud83d\udd39", "creation_timestamp": "2026-07-16T00:00:20.528539Z"}, {"uuid": "24327a54-fb46-4921-8860-07029218ed0a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "seen", "source": "https://t.me/proxy_bar/2735", "content": "CVE-2025-3515 - WordPress File Upload RCE\n\nexploit", "creation_timestamp": "2026-07-20T20:00:10.837527Z"}, {"uuid": "aa88bf83-473f-4dd2-a60c-885142f5f609", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "seen", "source": "https://t.me/proxy_bar/2735", "content": "CVE-2025-3515 - WordPress File Upload RCE\n\nexploit", "creation_timestamp": "2026-07-21T00:00:28.935969Z"}, {"uuid": "4199d8cf-436c-4668-bb2c-94be8cc461aa", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3515", "type": "published-proof-of-concept", "source": "https://t.me/proxy_bar/2735", "content": "CVE-2025-3515 - WordPress File Upload RCE\n\nexploit", "creation_timestamp": "2026-07-22T00:00:24.854941Z"}, {"uuid": "63f9ac0b-ee6f-4abc-a3ef-c9744f314355", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "https://t.me/hacking_Attack/157740", "content": "How I Discovered CVE-2025\u20133568: From XSS to Admin Account Takeover\nhttps://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-01T20:00:25.110912Z"}, {"uuid": "de765ac6-4bf8-4f47-86d1-6ad74c8dfb2a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "https://t.me/hacking_Attack/157742", "content": "SVG XSS \u2192 CSRF \u2192 Admin Takeover in Krayin CRM.Continue reading on Medium \u00bb (https://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-01T20:00:25.155386Z"}, {"uuid": "7aa45802-f982-4b3b-9617-702ae83ce20e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "https://t.me/hacking_Attack/157740", "content": "How I Discovered CVE-2025\u20133568: From XSS to Admin Account Takeover\nhttps://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-02T01:00:41.866281Z"}, {"uuid": "70b1fc7d-8b90-4413-860c-139b706401c5", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "seen", "source": "https://t.me/hacking_Attack/157742", "content": "SVG XSS \u2192 CSRF \u2192 Admin Takeover in Krayin CRM.Continue reading on Medium \u00bb (https://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-02T01:00:41.919094Z"}, {"uuid": "484df496-0b17-4497-976b-78affdecda96", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/157742", "content": "SVG XSS \u2192 CSRF \u2192 Admin Takeover in Krayin CRM.Continue reading on Medium \u00bb (https://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-03T11:00:04.602135Z"}, {"uuid": "a5920dc8-a6d6-4734-8d97-8c0d25f78543", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/157740", "content": "How I Discovered CVE-2025\u20133568: From XSS to Admin Account Takeover\nhttps://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-03T11:00:04.651337Z"}, {"uuid": "b053d690-c63b-4838-baff-77185d6faf28", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/157742", "content": "SVG XSS \u2192 CSRF \u2192 Admin Takeover in Krayin CRM.Continue reading on Medium \u00bb (https://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5)", "creation_timestamp": "2026-09-04T00:00:51.950877Z"}, {"uuid": "23add3f3-4cf3-4013-950b-00690a1fa59e", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2025-3568", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/157740", "content": "How I Discovered CVE-2025\u20133568: From XSS to Admin Account Takeover\nhttps://medium.com/@sneharghyaroy/how-i-discovered-cve-2025-3568-from-xss-to-admin-account-takeover-6dabfcc7a320?source=rss------bug_bounty-5", "creation_timestamp": "2026-09-04T00:00:51.992823Z"}]}